← العودة للجدول
CVE-2026-77459
CVE-2026-77459 — Argo CD: AppProject destination-namespace and resource restrictions bypassed by
📅 2026-10-15
🔴 Critical 🔥 No GHSA Vulnerability Containers CVSS 9.9

📋 الوصف الكامل

### Impact Argo CD checks an Application's AppProject before it creates resources during a sync. That check covers destination namespaces and servers, cluster-scoped resource allow and deny lists, and namespaced resource allow and deny lists, including resource names. PreDelete and PostDelete hooks skip it. When the Application is deleted, Argo CD creates those hooks with the application-con

💻 الأنظمة المتأثرة

Kubernetes

⚠️ نوع التهديد

Vulnerability

🔗 CVE ID

CVE-2026-77459

📡 المصدر

GHSA

✅ الحلول والتخفيف

Update to v2.10.0

🔗 المصدر الأصلي ← 📘 NVD ← ⚡ CISA KEV ← 🔍 Valters IT ←