8.8

CVE-2026-55797: argoproj argo-cd OS Command Injection

CVSS: 8.8v3.1HighAwaiting analysis
AliasesCGA-8vj2-28xm-3642CGA-gxfm-vph9-v2rcCGA-m6r5-pfhc-wxfv
Published 09-10-2026Last modified 09-10-2026
Open JSON

Vulnerability summary

CVE-2026-55797 is a high (CVSS 8.8) OS Command Injection vulnerability in argoproj argo-cd. EPSS estimates a 1.55% chance of exploitation in the next 30 days, higher than 74.8% of scored vulnerabilities.

Overall risk
36/100
0100
Medium · default modelHow is this calculated?
CVSS score
8.8/10
010
High · v3.1 (CVE.org)
EPSS score
1.55%
0%100%
Low · Change unavailable
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 0 · Related 2
CVE-2026-113708CVE-2026-113709

Timeline

  1. 09-10-2026
    PublishedVulnerability first disclosed.
  2. 09-10-2026
    Last modifiedVulnerability information updated.

Description

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository configured with a proxy URL. The proxy host and port are embedded in an SSH ProxyCommand that is executed through a shell without neutralizing shell metacharacters. A user who can create or update a repository or repository credential template can supply a crafted proxy host to execute commands in the repo-server and access its Git, Helm, and OCI credentials. This issue is fixed in versions 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

1.55%

Chance of exploitation in the next 30 days

Percentile

75%

Versus all other CVEs

30-day change

Change unavailable

Change unavailable

10-10-202621-10-2026
EPSS score
1.55%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Chainguard11 products
  • argo-cd-3.1All versions (No fix recorded)
  • argo-cd-3.1-compatAll versions (No fix recorded)
  • argo-cd-3.2All versions (No fix recorded)
  • argo-cd-3.2-compatAll versions (No fix recorded)
  • argo-cd-fips-3.1All versions (No fix recorded)
Github.com/argoproj/argo-cd2 products
  • v2≥ 2.11.0 (No fix recorded) | ≥ 2.11.0, ≤ 2.14.21
  • v3≥ 3.0.0, < 3.3.15 | ≥ 3.4.0, < 3.4.10 | ≥ 3.5.0, < 3.5.4 | ≥ 3.6.0-rc1, < 3.6.0-rc2
Wolfi2 products
  • argo-cd-3.2All versions (No fix recorded)
  • argo-cd-3.2-compatAll versions (No fix recorded)
Argoproj1 product
  • argo-cd≥ 2.11.0, ≤ 2.14.21 | ≥ 3.0.0, < 3.3.15 | ≥ 3.4.0, < 3.4.10 | ≥ 3.5.0, < 3.5.4 | = 3.6.0-rc1
Github.com/argoproj1 product
  • argo-cdAll versions (No fix recorded)

5 vendors · 17 products

References

11 links
Show all 11 references