Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-45737 · Microsoft / collected KEV context

GHSA-rg3g-4rw9-gqrp

BIT-argo-cd-2026-45737

GO-2026-5618

cve-program · CVE-2026-45737

• https://github.com/argoproj/argo-cd/security/advisories/GHSA-rg3g-4rw9-gqrp
• https://github.com/argoproj/argo-cd/commit/7879e6322465080a82d152bf00f2b92e0f36c658
• https://github.com/argoproj/argo-cd/commit/87e9148320749693624d08e3d6fa2cc217c672a0
• https://github.com/argoproj/argo-cd/commit/ac11bec9986807adc8886ef1181eced7347ef5c6
• https://github.com/argoproj/argo-cd/commit/bcb4298afc9fcff5f5d69f4e1db2d0a75983f42c
• https://github.com/argoproj/argo-cd/releases/tag/v3.2.12
• https://github.com/argoproj/argo-cd/releases/tag/v3.3.10
• https://github.com/argoproj/argo-cd/releases/tag/v3.4.2

nvd · CVE-2026-45737

• https://github.com/argoproj/argo-cd/commit/7879e6322465080a82d152bf00f2b92e0f36c658
• https://github.com/argoproj/argo-cd/commit/87e9148320749693624d08e3d6fa2cc217c672a0
• https://github.com/argoproj/argo-cd/commit/ac11bec9986807adc8886ef1181eced7347ef5c6
• https://github.com/argoproj/argo-cd/commit/bcb4298afc9fcff5f5d69f4e1db2d0a75983f42c
• https://github.com/argoproj/argo-cd/releases/tag/v3.2.12
• https://github.com/argoproj/argo-cd/releases/tag/v3.3.10
• https://github.com/argoproj/argo-cd/releases/tag/v3.4.2
• https://github.com/argoproj/argo-cd/security/advisories/GHSA-rg3g-4rw9-gqrp

osv · GHSA-rg3g-4rw9-gqrp

• https://github.com/argoproj/argo-cd/security/advisories/GHSA-rg3g-4rw9-gqrp
• https://github.com/argoproj/argo-cd

osv · GO-2026-5618

• https://github.com/argoproj/argo-cd/security/advisories/GHSA-rg3g-4rw9-gqrp

No related operational record is retained in the current change model.