CVE-2026-113672

Name of the Vulnerable Software and Affected Versions Argo CD versions 0.9.0 through 3.3.14 Argo CD versions 3.4.0 through 3.4.9 Argo CD versions 3.5.0 through 3.5.3 Argo CD versions 3.6.0-rc0 through 3.6.0-rc1

Description The repo-server evaluates .jsonnet files using an importer that fails to confine the import, importstr, or importbin functions to the repository root. This allows the use of absolute paths, parent-directory traversal, and repository symlinks to read any file accessible by the repo-server, such as /proc/self/environ, projected service-account tokens, mounted private keys, and repository credentials. While generated Secrets are redacted, placing imported content into a ConfigMap allows the data to be returned to the caller. Additionally, using importstr on a non-terminating device like /dev/zero can lead to memory exhaustion and a denial of service. An attacker can exploit this by committing a .jsonnet file to a Git repository or by uploading a file via the '/api/v1/applications/manifestsWithFiles' endpoint. This endpoint is also exposed through the argocd app diff --local --server-side-generate command. For directory applications, every .jsonnet file in the application directory is evaluated. The upload path requires only Application get permission on an existing directory Application.

Recommendations Update Argo CD to version 3.3.15. Update Argo CD to version 3.4.10. Update Argo CD to version 3.5.4. Update Argo CD to version 3.6.0-rc2.