Product
Argo CD fails to validate AppProject destination and resource restrictions during PreDelete and PostDelete hook execution, allowing attackers to escalate privileges via the application-controller.