Read the docs
TI-2026-76990 Aliases CVE-2026-113672

Path traversal in Argo CD Jsonnet importer exposes repo-server files

Priority MEDIUM 44CWE-22Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA.

Summary

Argo CD versions from 0.9.0 before 3.3.15, 3.4.10, 3.5.4 and 3.6.0-rc2 are affected. The Jsonnet importer does not confine import, importstr or importbin to the repository root, which is a path traversal flaw (CWE-22). An attacker who can commit a .jsonnet file to a Git repository used by an Application, or upload one through the manifests API with only Application get permission, can read any file the repo-server can read, including repository credentials and service-account tokens.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

Description from the CNA

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory traversal, and repository symlinks can open any file readable by the repo-server, including /proc/self/environ, projected service-account tokens, mounted private keys, and repository credentials. Although generated Secrets are redacted, placing imported contents in a ConfigMap returns the data to the caller. Using importstr on a non-terminating device such as /dev/zero can exhaust repo-server memory. An attacker can commit a .jsonnet file to a Git repository used by an Application or upload the file through POST /api/v1/applications/manifestsWithFiles, also exposed by argocd app diff --local --server-side-generate. Directory applications evaluate every .jsonnet file in the application directory. The upload path requires only Application get permission on an existing directory Application, without Application update or sync permission or repository write access. This issue is fixed in versions 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00837 57th percentileScored 2026-11-07
Fix Fixed argo-cd (argoproj): 3.3.1, 3.4.10, 3.5.4 +1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
argoprojargo-cd0.9.0 to before 3.3.1; 3.4.0-rc1 to before 3.4.10; 3.5.0-rc1 to before 3.5.4; 3.6.0-rc1 to before 3.6.0-rc23.3.1, 3.4.10, 3.5.4, 3.6.0-rc2Patch availableCNA
  • argo-cd Vendorargoproj Affected 0.9.0 to before 3.3.1; 3.4.0-rc1 to before 3.4.10; 3.5.0-rc1 to before 3.5.4; 3.6.0-rc1 to before 3.6.0-rc2 Fixed in 3.3.1, 3.4.10, 3.5.4, 3.6.0-rc2 Patch available CNA

CPE names Threatist (inferred) · 1

Inferred from how NVD named this product before; not given by a source.

CPEVersionsRoleVendor
cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:*——argoproj
  • cpe:2.3:a:argoproj:argo_cd:*:*:*:*:*:*:*:* Versions — — ·argoproj

Remediation

Upgrade to Argo CD 3.3.15, 3.4.10, 3.5.4 or 3.6.0-rc2, which contain the fix.

Written with Claude Haiku 5.5 from the sources below · 2026-10-29

  • Fix · CNA argo-cd (argoproj) Fixed in 3.3.1, 3.4.10, 3.5.4, 3.6.0-rc2

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Not affected: 2 products
  • Red Hat OpenShift GitOps
  • Red Hat Openshift Data Foundation 4

Timeline

  1. 2026-10-20 Threatist record created from CVE-2026-113672
  2. 2026-10-21 Affected versions changed · Red Hat
  3. 2026-10-21 CVSS score added · Red Hat
  4. 2026-10-28 CISA SSVC decision points changed

References

Other 10

  • TI-2026-22564 Argo Workflows has unauthorized access to Argo Workflows Template CVSS 3.1CRITICAL 9.8
  • TI-2024-14377 Argo CD vulnerable to Bypassing of Brute Force Protection via Application Crash and In-Memory Data Loss CVSS 3.1CRITICAL 9.8
  • TI-2024-14383 Argo CD vulnerable to Bypassing of Rate Limit and Brute Force Protection Using Cache Overflow CVSS 3.1CRITICAL 9.1
  • TI-2026-31086 ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction CVSS 3.1CRITICAL 9.6
  • TI-2023-20919 Cluster secret might leak in cluster details page in Argo CD CVSS 3.1CRITICAL 9.9
  • TI-2026-30603 Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor CVSS 4.0HIGH 8.2
See all 87 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences