EUVD-2026-43544

Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs. Attackers can exploit this unrestricted network access through combined attacks to achieve cluster compromise and remote code execution...

PT-2026-57989

Name of the Vulnerable Software and Affected Versions OpenShift Data Foundation 4 odf-multicluster-rhel9-operator affected versions not specified OpenShift GitOps argocd-image-updater-rhel8 affected versions not specified OpenShift GitOps argocd-rhel8 affected versions not specified OpenShift...

CVE-2026-62185

Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs. Attackers can exploit this unrestricted network access through combined attacks to achieve cluster compromise and remote code execution...

CVE-2026-62185 Argo CD Helm Chart < 10.0.0 Missing Network Policy RCE

Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs. Attackers can exploit this unrestricted network access through combined attacks to achieve cluster compromise and remote code execution...

CVE-2026-62185

The CVE-2026-62185 affects the Argo CD Helm Chart prior to 10.0.0, which fails to install network policies by default. As a result, any pod on the cluster can access the repo-server and other Argo APIs, enabling unrestricted network access. This can lead to cluster compromise and remote code exec...

CVE-2026-62185

Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs. Attackers can exploit this unrestricted network access through combined attacks to achieve cluster compromise and remote code execution...

CVE-2026-62185 Argo CD Helm Chart < 10.0.0 Missing Network Policy RCE

Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs. Attackers can exploit this unrestricted network access through combined attacks to achieve cluster compromise and remote code execution...

CLEANSTART-2026-KL41807 Security fixes for CVE-2025-47912, CVE-2025-55190, CVE-2025-55191, CVE-2025-58183, CVE-2025-58185, CVE-2025-58186, CVE-2025-58187, CVE-2025-58188, CVE-2025-58189, CVE-2025-59537, CVE-2025-59538, CVE-2025-61723, CVE-2025-61724, CVE-2025-61725, CVE-2026-24051, CVE-2026-25679, CVE-2026-25680, CVE-2026-25681, CVE-2026-27136, CVE-2026-27137, CVE-2026-27138, CVE-2026-27139, CVE-2026-27142, CVE-2026-27145, CVE-2026-29181, CVE-2026-33186, CVE-2026-33762, CVE-2026-34165, CVE-2026-34986, CVE-2026-35469, CVE-2026-39821, CVE-2026-39883, CVE-2026-41506, CVE-2026-42502, CVE-2026-42504, CVE-2026-42506, CVE-2026-42507, CVE-2026-42880, CVE-2026-44740, CVE-2026-44973, CVE-2026-45022, CVE-2026-45570, CVE-2026-45571, CVE-2026-45737, CVE-2026-45738, ghsa-2v5j-vhc3-9cwm, ghsa-2vgg-9h3w-qbr4, ghsa-2xsj-vh29-9cwm, ghsa-37cx-329c-33x3, ghsa-389r-gv7p-r3rp, ghsa-3v3m-wc6v-x4x3, ghsa-3wgm-2mw2-vh5m, ghsa-3xc5-wrhm-f963, ghsa-4x4m-3c2p-qppc, ghsa-6v2p-p543-phr9, ghsa-78h2-9frx-2jm8, ghsa-92cp-5422-2m47, ghsa-93mq-9ffx-83m2, ghsa-crhj-59gh-8x96, ghsa-f6x5-jh6r-wrfv, ghsa-gm2x-2g9h-ccm8, ghsa-gxhx-2686-5h9g, ghsa-h98r-wv3h-fr38, ghsa-hfvc-g4fc-pqhx, ghsa-hj2p-8wj8-pfq4, ghsa-j5w8-q4qc-rx2x, ghsa-jhf3-xxhw-2wpp, ghsa-m3xc-h892-ggx6, ghsa-m7cr-m3pv-hgrp, ghsa-mh2q-q3fh-2475, ghsa-mh63-6h87-95cp, ghsa-mw99-9chc-xw7r, ghsa-pc3f-x583-g7j2, ghsa-qw64-3x98-g7q2, ghsa-rg3g-4rw9-gqrp applied in versions: 2.13.9-r0, 2.14.20-r0, 3.0.16-r0, 3.0.19-r0, 3.1.4-r0, 3.1.8.-r0, 3.1.9-r4, 3.2.7-r0, 3.2.7-r1, 3.2.7-r2, 3.2.7-r3, 3.2.7-r4

Multiple security vulnerabilities affect the argo-cd package. These issues are resolved in later releases. See references for individual vulnerability details...

PT-2026-57887

Name of the Vulnerable Software and Affected Versions Argo CD Helm Chart versions prior to 10.0.0 Description The software fails to install network policies by default, which allows any pod within the cluster to access the repo-server and other Argo APIs. This unrestricted network access can be...

GHSA-XCGV-8MV7-V8C7 vulnerabilities

Vulnerabilities for packages: kubernetes-csi-node-driver-registrar, containerd, caddy, commercial-chainloop-backend, kubernetes-csi-node-driver-registrar-fips, dataplaneapi-fips, etcd, rekor, flux-source-watcher-fips, consul-fips, dapr-fips, harbor, traefik-fips, knative-operator-fips,...

GHSA-R56H-J38W-HRQQ vulnerabilities

Vulnerabilities for packages: longhorn-manager, longhorn-share-manager, cluster-autoscaler-fips, azurefile-csi-fips, harvester, longhorn-share-manager-fips, rke2-runtime-fips, azuredisk-csi, longhorn-manager-fips, argo-cd-fips, harvester-fips, azurefile-csi, rancher-system-agent,...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: telegraf, knative-kafka-broker-fips, argo-events, containerd, kyverno-fips, etcd, mattermost, gitlab-rails-ce, gatekeeper, commercial-expanso-edge, gitsign, harbor, traefik-fips, keda-fips, terragrunt, omnictl-multiarch, upwind-agent, argo-workflows, traefik,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: spire-server, kaf, containerd, etcd, skaffold, harbor, traefik-fips, upwind-agent, opentelemetry-collector, argo-workflows, kube-arangodb-fips, nerdctl, prometheus, etcd-fips, opentofu, kube-state-metrics, drone, flux-source-controller-fips, coder, flux,...

GHSA-F5WC-C3C7-36MC vulnerabilities

Vulnerabilities for packages: spire-server, kaf, juicefs, containerd, redpanda-console, caddy, etcd, step-issuer, skaffold, consul-fips, harbor, traefik-fips, step-ca-fips, mapotf, upwind-agent, opentelemetry-collector, argo-workflows, kube-arangodb-fips, nerdctl, scorecard, docker-cli-buildx,...

GHSA-5CGQ-3RG8-M6CV vulnerabilities

Vulnerabilities for packages: argocd-image-updater, guac, istio, mattermost, prometheus, external-secrets-operator, argo-events, gitsign, telegraf, containerd, terragrunt, k3s...

GHSA-W879-237Q-WC7R vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, cloud-provider-aws, policy-controller, steampipe, ko, flux, cluster-api-azure-controller, docker-machine-driver-harvester, trivy-operator, buildah, glab, crossplane-provider-family-azure, act, flux-source-controller, atlanti...

GHSA-X527-X647-Q7GG vulnerabilities

Vulnerabilities for packages: argocd-image-updater, skaffold, fscrypt, snyk-cli, k9s, kubernetes-dashboard, cloud-provider-aws, containerd, gitlab-kas, k3s, flux, osv-scanner, cert-manager, mattermost, kaf, external-secrets-operator, external-dns, trivy-operator, zarf, loki, chisel, trivy,...

GHSA-QPW4-5X99-6VJP vulnerabilities

Vulnerabilities for packages: cloud-provider-aws, flux, docker-machine-driver-harvester, trivy-operator, act, flux-source-controller, pulumi-language-java, gitlab-runner, aactl, kine, terragrunt, gatus, kubescape, nfpm, k9s, dagger, k3s, mattermost, syft, podman, external-dns,...

GHSA-45GG-VH54-H5M9 vulnerabilities

Vulnerabilities for packages: argocd-image-updater, skaffold, fscrypt, snyk-cli, k9s, kubernetes-dashboard, cloud-provider-aws, containerd, gitlab-kas, k3s, flux, osv-scanner, cert-manager, mattermost, kaf, external-secrets-operator, external-dns, docker-machine-driver-harvester, trivy-operator,...

GHSA-89GR-R52H-F8RX vulnerabilities

Vulnerabilities for packages: crossplane-provider-azure-managedidentity, cloud-provider-aws, policy-controller, steampipe, ko, flux, cluster-api-azure-controller, docker-machine-driver-harvester, trivy-operator, buildah, glab, crossplane-provider-family-azure, act, flux-source-controller, atlanti...