CVE-2026-55797
- Source
- https://cve.org/CVERecord?id=CVE-2026-55797
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-55797.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2026-55797
- Aliases
- Downstream
CGA (22)
- CGA-2qh4-x2wf-7g6c
- CGA-3w62-mrh5-28qj
- CGA-4ffc-2cvw-j3x3
- CGA-85q3-rmcg-qqxv
- CGA-8vj2-28xm-3642
- CGA-9247-vxrc-f5f9
- CGA-cvqp-f7w8-qmx8
- CGA-f466-966q-629c
- CGA-fx5h-877g-jgm2
- CGA-gw9c-w95h-p3qv
- CGA-gxfm-vph9-v2rc
- CGA-jw79-9jv7-cm25
- CGA-m6r5-pfhc-wxfv
- CGA-m8vx-p9gh-m59r
- CGA-p2hm-jmqh-xp6c
- CGA-q5x4-6fjr-qhj9
- CGA-rwj7-mwgp-q2jw
- CGA-vjm6-5xm3-7w39
- CGA-w7v3-rj7v-pj96
- CGA-wv3q-84hq-26rh
- CGA-x4jv-m2j7-3hc8
- CGA-xpj3-696g-m2pq
ECHO (1)
MINI (24)
- MINI-29jg-v5w8-mpgv
- MINI-3m5p-6hvh-757j
- MINI-42mw-c256-86mh
- MINI-44f6-mrpm-h385
- MINI-5775-j393-rvvj
- MINI-5wr8-jjfw-7m8m
- MINI-6hjj-3grh-rv63
- MINI-8h24-jqqw-mvrj
- MINI-8v8p-rqh2-gg4p
- MINI-93jr-w4gc-72wq
- MINI-9frh-54jm-8mgw
- MINI-g5xm-q86x-jx7j
- MINI-h4xx-347f-3m36
- MINI-jqrq-f448-vj5p
- MINI-jqwc-qc9f-57qq
- MINI-jwvj-44h5-v6r9
- MINI-m98x-x5vv-33x9
- MINI-p94m-wqv8-wgmf
- MINI-q972-h864-2rcx
- MINI-r7rv-836f-42pr
- MINI-vc7m-2mgm-q7hr
- MINI-vxp6-wh9h-hv7x
- MINI-x67p-xhhq-qrr2
- MINI-xvqv-qr82-93fj
- Published
- 2026-10-09T16:43:35Z
- Modified
- 2026-10-28T02:31:04Z
- Severity
-
- 8.8 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
- Summary
- Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL
- Details
-
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository configured with a proxy URL. The proxy host and port are embedded in an SSH ProxyCommand that is executed through a shell without neutralizing shell metacharacters. A user who can create or update a repository or repository credential template can supply a crafted proxy host to execute commands in the repo-server and access its Git, Helm, and OCI credentials. This issue is fixed in versions 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2.
- Database specific
{ "cna_assigner": "GitHub_M", "cwe_ids": [ "CWE-78" ], "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55797.json" }- References
-
- https://github.com/argoproj/argo-cd/releases/tag/v3.3.15
- https://github.com/argoproj/argo-cd/releases/tag/v3.4.10
- https://github.com/argoproj/argo-cd/releases/tag/v3.5.4
- https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/55xxx/CVE-2026-55797.json
- https://github.com/argoproj/argo-cd/security/advisories/GHSA-j6cw-g6p4-7hch
- https://nvd.nist.gov/vuln/detail/CVE-2026-55797
- https://github.com/argoproj/argo-cd/commit/1e3ddd0b7250aa23f489956b5fab8c13d0493a9f
- https://github.com/argoproj/argo-cd/commit/9b27aeb1a4fb15d11a0f01cad65dea1fdfc60205
- https://github.com/argoproj/argo-cd/pull/15864
Affected packages
Git / github.com/argoproj/argo-cd
Affected ranges
- Type
- GIT
- Repo
- https://github.com/argoproj/argo-cd
- Events
-
IntroducedLast AffectedIntroducedFixedIntroducedFixedIntroducedFixedIntroducedFixedFixedFixed
- Database specific
-
Show details
{ "extracted_events": [ { "range": [ { "introduced": "2.11.0" }, { "last_affected": "2.14.21" } ], "source": "AFFECTED_FIELD", "strategy": "StringRangeExpression" }, { "range": [ { "introduced": "3.0.0" }, { "fixed": "3.3.15" } ], "source": "AFFECTED_FIELD", "strategy": "StringRangeExpression" }, { "range": [ { "introduced": "3.4.0" }, { "fixed": "3.4.10" } ], "source": "AFFECTED_FIELD", "strategy": "StringRangeExpression" }, { "range": [ { "introduced": "3.5.0" }, { "fixed": "3.5.4" } ], "source": "AFFECTED_FIELD", "strategy": "StringRangeExpression" }, { "range": [ { "introduced": "= 3.6.0-rc1" }, { "last_affected": "= 3.6.0-rc1" } ], "source": "AFFECTED_FIELD", "strategy": "StandaloneSingleVersion" }, { "range": [ { "fixed": "1e3ddd0b7250aa23f489956b5fab8c13d0493a9f" } ], "source": "REFERENCES_COMMIT" }, { "range": [ { "fixed": "9b27aeb1a4fb15d11a0f01cad65dea1fdfc60205" } ], "source": "REFERENCES_COMMIT" }, { "original_tag": "v3.3.15", "range": [ { "fixed": "a7d718da2e77e6fe9e3d58cd788b5cdaa6b215fe" } ], "source": "REFERENCES_TAG" }, { "original_tag": "v3.4.10", "range": [ { "fixed": "58c8bc04d3f14568d817cd9e3a525f313c295c01" } ], "source": "REFERENCES_TAG" }, { "original_tag": "v3.5.4", "range": [ { "fixed": "d6d5b248ce00e1a2c512068002a93d3319767087" } ], "source": "REFERENCES_TAG" }, { "original_tag": "v3.6.0-rc2", "range": [ { "fixed": "f922b44b5d17765910e31a583dfb253d75afebe6" } ], "source": "REFERENCES_TAG" } ] }