Unpatched Argo CD Repo-Server Unauthenticated RCE Can Hand Over Your Whole Kubernetes Cluster
Synacktiv disclosed an unauthenticated RCE chain in Argo CD's repo-server (no CVE yet): its internal gRPC service has no auth, and a crafted GenerateManifest…