Post

CI/CD pwnage with a pre-auth RCE in #ArgoCD by @rustyphasm.bsky.social 💥 Discover how a single misconfiguration in a Helm chart can lead to a full cluster compromise sprinkled with some CodeQL shenanigans! 🥷 www.synacktiv.com/en/publicati...

synacktiv.comCaught in the Octopus Trap: Unauthenticated RCE in Argo CD with CodeQLCaught in the Octopus Trap: Unauthenticated RCE in Argo CD with CodeQL

1/7/26, 2:59 pm1 repost3 likes

YAMLwrangler

@jmm86.bsky.social

2 July

Exactly. RBAC misconfiguration is still the most common security gap in k8s clusters. Day 1 decisions are hard to undo at day 100.