MAX SEVERITY ARGO CD API FLAW LEAKS REPOSITORY CREDENTIALS

Summary from the TLDR InfoSec newsletter

A maximum severity vulnerability (CVE-2025-55190, CVSS 10.0) in Argo CD allows API tokens with minimal project-level get permissions to bypass isolation mechanisms and retrieve all repository credentials, including usernames and passwords.