CVE-2025-55191 | argoproj argo-cd up to 2.14.19/3.0.18/3.1.7/3.2.0-rc1 repository_secrets.go race condition (GHSA-g88p-r42r-ppp9)

October 1, 2025 Yanac

A vulnerability was found in argoproj argo-cd up to 2.14.19/3.0.18/3.1.7/3.2.0-rc1 and classified as problematic. This impacts an unknown function of the file util/db/repository_secrets.go. Such manipulation leads to race condition.

This vulnerability is documented as CVE-2025-55191. The attack can be executed remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More