CVE-2026-6388
A flaw was found in ArgoCD Image Updater. This vulnerability allows an attacker, with permissions to create or modify an ImageUpdater resource in a multi-tenant environment, to bypass namespace boundaries. By exploiting insufficient validation, the attacker can trigger unauthorized image updates on applications managed by other tenants. This leads to cross-namespace privilege escalation, impacting application integrity through unauthorized application updates.
Vendor
-
Product
-
CWE
Yayın Tarihi
2026-04-15 22:17:22
Güncelleme
2026-04-17 15:38:09
Source Identifier
secalert@redhat.com
KEV Date Added
-