CVE-2026-121621

A command injection vulnerability exists in Argo CD Image Updater . The flaw occurs because a proxy URL configured for an SSH Git repository is passed unsanitized into a shell-interpreted SSH command. An attacker capable of setting a malicious proxy value can inject shell metacharacters to execut...