Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

Summary

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository configured with a proxy URL. The proxy host and port are embedded in an SSH ProxyCommand that is executed through a shell without neutralizing shell metacharacters. A user who can create or update a repository or repository credential template can supply a crafted proxy host to execute commands in the repo-server and access its Git, Helm, and OCI credentials. This issue is fixed in versions 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2.

Timeline

1. Oct 9, 2026, 4:43 PM UTCCVE published
2. Oct 9, 2026, 5:53 PM UTCCISA SSVC assessment

   Exploitation: none · Automatable: no · Technical impact: total

3. Oct 9, 2026, 5:53 PM UTCRecord last updated

Affected versions

• argoproj argo-cd

  From 2.11.0 · through 2.14.21; From 3.0.0 · fixed in 3.3.15; From 3.4.0 · fixed in 3.4.10; From 3.5.0 · fixed in 3.5.4

• argo-cdBitnami

  From 2.11.0 · fixed in 3.3.15; From 3.4.0 · fixed in 3.4.10; From 3.5.0 · fixed in 3.5.4

• github.com/argoproj/argo-cd/v2Go

  From 2.11.0 · through 2.14.21

• github.com/argoproj/argo-cd/v3Go

  From 3.0.0 · fixed in 3.3.15

• github.com/argoproj/argo-cd/v3Go

  From 3.4.0 · fixed in 3.4.10

• github.com/argoproj/argo-cd/v3Go

  From 3.5.0 · fixed in 3.5.4

• github.com/argoproj/argo-cd/v3Go

  From 3.6.0-rc1 · fixed in 3.6.0-rc2

• github.com/argoproj/argo-cdGo

  All versions

• github.com/argoproj/argo-cd/v2Go

  From 2.11.0

• github.com/argoproj/argo-cd/v3Go

  From 3.0.0 · fixed in 3.3.15; From 3.4.0 · fixed in 3.4.10; From 3.5.0 · fixed in 3.5.4; From 3.6.0-rc1 · fixed in 3.6.0-rc2

References 8