CVE-2026-62185 | BDVDB-2026-347501 Detail
argoprojargo-helm
Description#
Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs. Attackers can exploit this unrestricted network access through combined attacks to achieve cluster compromise and remote code execution.
Impact#
Per CVSS v3.1: confidentiality impact high, integrity impact high, availability impact low. Attack vector: adjacent.
Weaknesses#
- CWE-1188 Initialization of a Resource with an Insecure Default
References#
Exploit#
No public exploit known
History#
- Version 1Record published in the CVE List.
- Version 2Most recent update recorded in the CVE List.