{"id":"CVE-2025-61560","published":"2026-10-09T17:16:41.183","lastModified":"2026-10-09T17:41:15.270","description":"A race condition vulnerability in the SessionManager of CNCF: Cloud Native Computing Foundation Argo CD v3.0.6 allows attackers to bypass rate limiting and perform a brute force attack via repeated crafted requests.","cvssScore":null,"cvssSeverity":null,"cvssVector":null,"cwes":[],"vendors":[],"products":[],"references":[{"url":"https://github.com/argoproj/argo-cd/","tags":[]},{"url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-4439-h7jw-5cjj","tags":[]}],"exploitRefs":[{"url":"https://github.com/argoproj/argo-cd/","tags":[]},{"url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-4439-h7jw-5cjj","tags":[]}],"hasPoc":true,"ai":null}