Plan
active
Argo CD v3.3.15: multiple CRITICAL RCE fixes in repo-server
- Platform/SRE — Plan: Four CRITICAL-severity vulnerabilities patched, including repo-server command execution via Kustomize and AppProject restriction bypass — none are KEV-listed and EPSS scores are near zero, so no confirmed exploitation, but schedule upgrade of Argo CD to v3.3.15 this sprint given the RCE class of findings.
- CI/CD — Plan: Argo CD v3.3.15 patches CRITICAL command-execution flaws in the GitOps deployment tool; coordinate with the platform team to schedule a cluster upgrade to v3.3.15, prioritizing any environments where untrusted Kustomize or Jsonnet sources are in use.
- Leader — Skip
- Signals: Argo CD 3.3 supported · CVE-2025-61560 — CISA KEV: not listed, EPSS 0.00 · CVE-2026-55797 — CISA KEV: not listed, EPSS 0.02 · CVE-2026-77459 — CISA KEV: not listed, EPSS n/a
This entry was curated and judged by AI (Claude) with automated enrichment
(CISA KEV / EPSS / public PoC). Verify against the original source before
acting. Found a bad verdict?
Report it —
confirmed errors go to the corrections log.