Unpatched Argo CD Repo-Server Flaw Could Let Attackers Take Over Kubernetes Clusters
Synacktiv found an unpatched flaw in Argo CD's repo-server whose internal gRPC service has no authentication, letting an unauthenticated attacker who can reach that port run code and potentially take over the cluster; it reported the bug to maintainers in...