High severity7.6NVD Advisory· Published Jul 13, 2026· Updated Jul 15, 2026

CVE-2026-62185

Description

Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs. Attackers can exploit this unrestricted network access through combined attacks to achieve cluster compromise and remote code execution.

Affected products

Argo CD/Argo CDllm-fuzzy
Range: <10.0.0
Argoproj/Argo Helmllm-fuzzy
Range: <10.0.0

Patches

Vulnerability mechanics

References

github.com/argoproj/argo-helm/security/advisories/GHSA-47m3-95c7-g2g8nvd
www.vulncheck.com/advisories/argo-cd-helm-chart-missing-network-policy-rcenvd

News mentions

No linked articles in our index yet.

cvss	0.494
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000