{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/argo-cd-2.1.0-to-3.3.15-3.4.0-to-3.4.10-3.5.0-to-3.5.4-3.6.0-rc1/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:cloud_native_computing_foundation:argo_cd:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-113709"}],"_cs_exploited":false,"_cs_has_poc":true,"_cs_poc_references":["https://sploitus.com/exploit?id=CVE-2026-113709\u0026utm_source=rss\u0026utm_medium=rss"],"_cs_products":["Argo CD (2.1.0 to \u003c3.3.15, 3.4.0 to \u003c3.4.10, 3.5.0 to \u003c3.5.4, 3.6.0-rc1)"],"_cs_severities":["critical"],"_cs_tags":["remote-code-execution","gitops","kubernetes"],"_cs_type":"advisory","_cs_vendors":["Cloud Native Computing Foundation"],"content_html":"\u003cp\u003eArgo CD, a GitOps continuous delivery tool, contains a vulnerability (CVE-2026-113709) that enables remote code execution within the 'argocd-repo-server' component. This vulnerability is present in versions 2.1.0 through 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2. The flaw occurs when the '--enable-helm' flag is enabled for Kustomize builds. An attacker can influence the 'helmGlobals.configHome' setting to point to a directory controlled by a Git repository or via the 'manifestsWithFiles' API endpoint.\u003c/p\u003e\n\u003cp\u003eBecause Helm automatically loads downloader plugins from the '\u0026lt;configHome\u0026gt;/.data/plugins' directory without additional installation steps, an attacker can place a malicious executable in this path. When the 'argocd-repo-server' attempts to process a chart using a protocol handled by the plugin, it executes the payload under the context of the 'repo-server' user. This allows for the exfiltration of repository credentials and sensitive environment data. This exploit requires only 'Application get' permissions.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eThe operator enables '--enable-helm' within the Argo CD Kustomize build configuration.\u003c/li\u003e\n\u003cli\u003eThe attacker gains read access to an existing Application, or the ability to commit to a Git repository used by an Application.\u003c/li\u003e\n\u003cli\u003eThe attacker crafts a malicious Helm downloader plugin.\u003c/li\u003e\n\u003cli\u003eThe attacker defines a Kustomization file that sets 'helmGlobals.configHome' to a repository-controlled directory.\u003c/li\u003e\n\u003cli\u003eThe attacker commits the plugin and configuration to a Git repository, or uploads the files via the 'POST /api/v1/applications/manifestsWithFiles' endpoint.\u003c/li\u003e\n\u003cli\u003eThe 'argocd-repo-server' performs a build operation, causing Helm to identify and load the malicious plugin from the attacker-controlled directory.\u003c/li\u003e\n\u003cli\u003eThe Helm plugin executes as the 'repo-server' user during the manifest generation process.\u003c/li\u003e\n\u003cli\u003eThe attacker exfiltrates sensitive repository credentials or process-accessible data from the 'argocd-repo-server' environment.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for complete compromise of the 'argocd-repo-server' execution context. Attackers can steal repository credentials, access secret management data, and potentially pivot into the broader Kubernetes cluster environment, depending on the service account permissions granted to the Argo CD controller.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eUpgrade to the patched versions of Argo CD: 3.3.15, 3.4.10, 3.5.4, or 3.6.0-rc2 immediately.\u003c/li\u003e\n\u003cli\u003eReview deployments for the use of the '--enable-helm' flag; disable this flag if Helm plugin functionality is not required for Kustomize builds.\u003c/li\u003e\n\u003cli\u003eRestrict 'Application get' permissions to minimize the exposure of the 'manifestsWithFiles' API endpoint.\u003c/li\u003e\n\u003c/ol\u003e\n","date_modified":"2026-10-20T20:44:37Z","date_published":"2026-10-20T19:45:34Z","id":"https://feed.craftedsignal.io/briefs/2026-10-argo-cd-rce/","summary":"Argo CD versions 2.1.0 through 3.6.0-rc1 are vulnerable to arbitrary code execution if --enable-helm is used, allowing attackers to inject a malicious Helm plugin via repository-controlled configuration.","title":"Argo CD: Arbitrary code execution via Helm downloader plugin (CVE-2026-113709)","url":"https://feed.craftedsignal.io/briefs/2026-10-argo-cd-rce/"}],"language":"en","title":"CraftedSignal Threat Feed - Argo CD (2.1.0 to \u003c3.3.15, 3.4.0 to \u003c3.4.10, 3.5.0 to \u003c3.5.4, 3.6.0-Rc1)","version":"https://jsonfeed.org/version/1.1"}