fluxcd — Vulnerabilities & Security Advisories 9

FluxCD is an open-source GitOps toolkit for automating container infrastructure deployments. Historically, it has been vulnerable to multiple remote code execution (RCE) flaws, cross-site scripting (XSS), privilege escalation, and insecure default configurations. These vulnerabilities often stem from improper input validation, insecure deserialization, and insufficient access controls. Notable security incidents include CVE-2023-25165, which allowed RCE through the notification controller, and CVE-2023-27452, enabling privilege escalation via the Helm controller. While FluxCD provides declarative GitOps workflows, its complex architecture and multiple components create potential attack surfaces requiring careful configuration and regular updates to mitigate risks.