BIT-argo-cd-2026-55797

See a problem?

Import Source

https://github.com/bitnami/vulndb/tree/main/data/argo-cd/BIT-argo-cd-2026-55797.json

JSON Data

https://api.osv.dev/v1/vulns/BIT-argo-cd-2026-55797

Aliases

Published

2026-10-16T08:34:47Z

Modified

2026-10-16T09:55:43Z

Summary

Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

Details

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository configured with a proxy URL. The proxy host and port are embedded in an SSH ProxyCommand that is executed through a shell without neutralizing shell metacharacters. A user who can create or update a repository or repository credential template can supply a crafted proxy host to execute commands in the repo-server and access its Git, Helm, and OCI credentials. This issue is fixed in versions 3.3.15, 3.4.10, 3.5.4, and 3.6.0.

Database specific

{
    "cpes":  [
        "cpe:2.3:a:linuxfoundation:argo_continuous_delivery:*:*:*:*:*:kubernetes:*:*"
    ],
    "severity":  "High"
}

References

Affected packages

Bitnami / argo-cd

Package

Name: argo-cd
Purl: pkg:bitnami/argo-cd

Severity

8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator

Affected ranges

Type: SEMVER
Events: Introduced

2.11.0

Fixed

3.3.15

Introduced

3.4.0

Fixed

3.4.10

Introduced

3.5.0

Fixed

3.5.4

Database specific

source

"https://github.com/bitnami/vulndb/tree/main/data/argo-cd/BIT-argo-cd-2026-55797.json"