The vulnerability in Argo CD allows an attacker who can modify an Application’s Git repository to add a PostDelete resource hook that bypasses the AppProject destination and resource authorization checks. By committing a delete hook targeted to a forbidden namespace, cluster, group, kind, or resource, the controller creates that resource with cluster credentials when the Application is deleted. This bypass can result in creation or deletion of cluster‑scoped resources, access to disallowed namespaces, and deployment of arbitrary objects, compromising the cluster’s integrity. The weakness is a form of improper authorization (CWE‑863).

Argo CD versions 2.10.0 through 3.6.0‑rc2 inclusive are affected. The vulnerability is fixed in newer releases that follow these versions, so any deployment using an older release is susceptible.

The CVSS score of 9.9 indicates a critical severity. The EPSS score is < 1%, indicating a low probability of exploitation but not impossible, and the vulnerability is not listed in CISA KEV. The most likely attack vector requires write access to the Application’s Git repository; once authorized, an attacker can commit a delete hook and trigger the creation of resources with cluster‑wide privileges. The exploitation is straightforward with no additional conditions beyond repository write permission.