Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
Argo CD can be tricked by crafted tar archives
published 13 days ago
Summary
The Argo CD deployment tool can be fooled by specially crafted tar files, which could let an attacker place or modify files on the system. This could lead to unauthorized changes or code execution within your CI/CD pipeline. Apply the latest update from the vendor or restrict the use of untrusted tar archives in your deployment process.
What to do
- Update cleanstart argo-cd to version 3.2.3-r0.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | argo-cd |
< 3.2.3-r0 Fix: upgrade to 3.2.3-r0
|
Original advisory text
tar
Security vulnerability affects the argo-cd package. tar.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published23 Oct 2026
Updated23 Oct 2026
First seen23 Oct 2026
Sources
CLEANSTART-2026-YV46076 · OSV
Track software like this
Free during beta