Argo CD (a DevOps application on Kubernetes) acknowledged a vulnerability we found, with CVE-2024-41666.


The Argo CD web terminal session does not handle the revocation of user permissions properly.

See Argo CD’s security Advisory for more details.