A newly disclosed and still-unpatched vulnerability in Argo CD's repo-server component allows attackers with internal Kubernetes cluster access to execute arbitrary code and manipulate deployments. The flaw stems from an unauthenticated gRPC GenerateManifest endpoint that can be abused via Kustomize Helm build options. Combined with access to Redis, attackers can inject malicious manifests that auto-deploy when Auto Sync is enabled. Network policies that would block this attack path are not enabled by default in Helm chart deployments. Security researchers urge organizations to treat GitOps platforms as tier-zero infrastructure — equivalent to identity platforms — given their privileged access to private repos, cluster write permissions, and deployment secrets. Mitigations include enforcing strict Kubernetes network policies to isolate repo-server and Redis from untrusted pods.
