{"id":"BIT-argo-cd-2026-55797","summary":"Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL","details":"Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository configured with a proxy URL. The proxy host and port are embedded in an SSH ProxyCommand that is executed through a shell without neutralizing shell metacharacters. A user who can create or update a repository or repository credential template can supply a crafted proxy host to execute commands in the repo-server and access its Git, Helm, and OCI credentials. This issue is fixed in versions 3.3.15, 3.4.10, 3.5.4, and 3.6.0.","aliases":["CVE-2026-55797","GHSA-j6cw-g6p4-7hch"],"modified":"2026-10-16T09:55:43.217904587Z","published":"2026-10-16T08:34:47.084Z","database_specific":{"severity":"High","cpes":["cpe:2.3:a:linuxfoundation:argo_continuous_delivery:*:*:*:*:*:kubernetes:*:*"]},"references":[{"type":"WEB","url":"https://github.com/argoproj/argo-cd/commit/1e3ddd0b7250aa23f489956b5fab8c13d0493a9f"},{"type":"WEB","url":"https://github.com/argoproj/argo-cd/commit/9b27aeb1a4fb15d11a0f01cad65dea1fdfc60205"},{"type":"WEB","url":"https://github.com/argoproj/argo-cd/pull/15864"},{"type":"WEB","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15"},{"type":"WEB","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10"},{"type":"WEB","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4"},{"type":"WEB","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2"},{"type":"WEB","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-j6cw-g6p4-7hch"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55797"}],"affected":[{"package":{"name":"argo-cd","ecosystem":"Bitnami","purl":"pkg:bitnami/argo-cd"},"ranges":[{"type":"SEMVER","events":[{"introduced":"2.11.0"},{"fixed":"3.3.15"},{"introduced":"3.4.0"},{"fixed":"3.4.10"},{"introduced":"3.5.0"},{"fixed":"3.5.4"}]}],"database_specific":{"source":"https://github.com/bitnami/vulndb/tree/main/data/argo-cd/BIT-argo-cd-2026-55797.json"},"severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H"}]}],"schema_version":"1.9.0"}