CVE WATCH / VULNERABILITY DETAIL
CVE-2026-113672
CRITICALCVSS 9.9NVD feed
Published 20 October 2026 · tracked since 21 October 2026
Description
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory tr
References
- NVD — National Vulnerability Database
- CVE.org record (MITRE)
- CISA Known Exploited Vulnerabilities catalog
Latest tracked vulnerabilities
- CVE-2026-113719 MEDIUM 4.5
- CVE-2026-113716 MEDIUM 4.5
- CVE-2026-113708 CRITICAL 9.9
- CVE-2026-113709 CRITICAL 9.9
- CVE-2026-113643 MEDIUM 4.3
- CVE-2026-113710 MEDIUM 5.9
- CVE-2026-113711 HIGH 7.5
- CVE-2026-113666 HIGH 7.1
- CVE-2026-113668 MEDIUM 5.3
- CVE-2026-113670 MEDIUM 5.3