CVE-2026-113709 argoproj CVE debrief

Who should care

Argo CD operators, administrators, and users who have enabled --enable-helm for kustomize build. They should review and update Argo CD to a non-vulnerable version, disable --enable-helm if not required, and implement compensating controls to restrict access to repository.

Why it matters

CVE-2026-113709 allows for command execution in Argo CD repo-server when using Kustomize Helm config home. Operators and administrators should review and update Argo CD to a non-vulnerable version, disable --enable-helm if not required, and implement compensating controls.

• Command execution in repo-server
• Potential data theft or unauthorized access
• Elevation of privileges for attackers
• Possible disruption of service

Technical summary

The vulnerability exists in Argo CD versions 2.1.0 to 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2. An attacker can commit a Kustomization and plugin to a Git repository that an Application builds or upload files through POST /api/v1/applications/manifestsWithFiles. The command runs as the repo-server user and can read repository credentials and other process-accessible data. The vulnerability requires operator enablement of --enable-helm for kustomize build. Helm automatically loads a downloader plugin from `<configHome>/.data/plugins` without a separate plugin-install step and executes its program inside argocd-repo-server when a helmCharts repository URL uses the plugin's protocol.

Defensive priority

High

Recommended defensive actions

• Review and update Argo CD to a non-vulnerable version
• Disable --enable-helm if not required
• Monitor repository credentials and process-accessible data
• Implement compensating controls to restrict access to repository
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The CVE record and source item provide details on the vulnerability, affected versions, and references. The vulnerability exists in Argo CD versions 2.1.0 to 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2. The vulnerability requires operator enablement of --enable-helm for kustomize build. Helm automatically loads a downloader plugin from `<configHome>/.data/plugins` without a separate plugin-install step and executes its program inside argocd-repo-server when a helmCharts repository URL uses the plugin's protocol.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.