An unpatched vulnerability in Argo CD’s repo-server component allows unauthenticated attackers to execute arbitrary code if they can reach its internal network port. This flaw, discovered by Synacktiv, could lead to a complete Kubernetes cluster takeover. There is currently no fix or CVE assigned, making it a significant risk for organizations using Argo CD.