Argo CD 访问控制不当漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://github.com/argoproj/argo-cd/security/advisories/GHSA-2f5v-8r3f-8pww
• https://avd.aliyun.com/detail?id=AVD-2025-55190
• https://www.anquanke.com/post/id/288953
• https://nvd.nist.gov/vuln/detail/CVE-2025-55190
• https://github.com/argoproj/argo-cd/security/advisories/GHSA-9766-5277-j5hr
• https://www.upwind.io/feed/cve-2025-55190-argo-cd-project-api-token-exposes-repository-credentials
• https://cloud.tencent.com/developer/article/2242206
• https://argo-cd.readthedocs.io/en/stable/security_considerations/
• https://www.nsfocus.net/vulndb/115126
• https://github.com/argoproj/argo-cd/security/advisories/GHSA-87p9-x75h-p4j2

Related Vulnerabilities

• (CVE-2025-55190) Argo CD项目API权限漏洞导致敏感仓库凭证泄露
• PoCCVE-2024-37152: Argo CD Unauthenticated Access to sensitive setting
• Argo CD未经身份验证访问敏感设置(CVE-2024-37152)