On GitHub, the company said all versions of Argo CD are vulnerable to the path traversal bug and noted that it is "possible to craft special Helm chart packages containing value files that are ...

The newly disclosed flaw in Argo CD “allows malicious actors to load a Kubernetes Helm Chart YAML file to the vulnerability and ‘hop’ from their application ecosystem to other applications ...

Meeting these requirements opens the way to create a malicious Helm chart to consume YAML as values files, eventually gaining access to normally inaccessible data. Argo CD is being used by ...