---
title: "CVE-2026-113672: Argo CD: A Jsonnet import can read files from the repo-server"
url: https://erroneo.us/security/cve/CVE-2026-113672/
description: "CVE-2026-113672 (argoproj argo-cd): Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and…"
type: vulnerability-record
section: "Security Digest"
date_published: 2026-10-20
date_modified: 2026-10-21
publisher: erroneo.us
author: erroneo.us Security Desk
cve: "CVE-2026-113672"
kev: false
cvss: 9.9
epss: 0.00837
license: All rights reserved. Quote with attribution and a link.
---

# CVE-2026-113672: Argo CD: A Jsonnet import can read files from the repo-server

**Signal:** Critical, preconditions apply. Severe if exploited, but exploitation needs conditions that may not apply to you. (Computed from CISA KEV, EPSS and CVSS; not an editorial verdict.)

## Should you act?

- No confirmed exploitation. It is not in CISA’s KEV catalog. That can change quickly after a public write-up; re-check if you are affected.
- EPSS 0.8% , percentile 57: FIRST’s model estimates a 0.8% chance of exploitation activity in the next 30 days, higher than 57% of all scored CVEs (moderate). EPSS is a probability, not a verdict.
- Needs an account (low (any account)). Exposure depends on who can log in.
- Editorial verdict: Patch this week. Argo CD: Repo-Server RCE and AppProject Bypass (Oct 2026) — Upgrade Argo CD to a patched 3.3, 3.4 or 3.5 release this week, and today on shared instances where people you do not fully trust can push to tracked repos or merely view an Application.

## What it is

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 0.9.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the repo-server evaluates .jsonnet files with an importer that does not confine import, importstr, or importbin to the repository root. Absolute paths, parent-directory traversal, and repository symlinks can open any file readable by the repo-server, including /proc/self/environ, projected service-account tokens, mounted private keys, and repository credentials. Although generated Secrets are redacted, placing imported contents in a ConfigMap returns the data to the caller. Using importstr on a non-terminating device such as /dev/zero can exhaust repo-server memory. An attacker can commit a .jsonnet file to a Git repository used by an Application or upload the file through POST /api/v1/applications/manifestsWithFiles, also exposed by argocd app diff --local --server-side-generate. Directory applications evaluate every .jsonnet file in the application directory. The upload path requires only Application get permission on an existing directory Application, without Application update or sync permission or repository write access. This issue is fixed in versions 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2.

## Affected products (CVE record)

- argoproj argo-cd: >= 0.9.0, < 3.3.1, >= 3.4.0-rc1, < 3.4.10, >= 3.5.0-rc1, < 3.5.4, >= 3.6.0-rc1, < 3.6.0-rc2

## Severity

- GitHub_M CVSS 3.1: 9.9 `CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H`

## Exploitation

- CISA KEV: not listed (no confirmed in-the-wild exploitation known to CISA).
- FIRST EPSS (model of 2026-10-21): 0.84% probability of exploitation activity in the next 30 days; percentile 57.

## Sources

- [CVE.org record CVE-2026-113672](https://www.cve.org/CVERecord?id=CVE-2026-113672)
- [NVD entry CVE-2026-113672](https://nvd.nist.gov/vuln/detail/CVE-2026-113672)
- [github.com](https://github.com/argoproj/argo-cd/security/advisories/GHSA-m3vr-7329-44ww)
- [github.com](https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3)
- [github.com](https://github.com/argoproj/argo-cd/security/advisories/GHSA-6gcg-hp2x-q54h)
- [github.com](https://github.com/argoproj/argo-cd/pull/561)
- [github.com](https://github.com/argoproj/argo-cd/commit/27471d524958878e7acc5131fb466b292079cd05)
- [argo-cd.readthedocs.io](https://argo-cd.readthedocs.io/en/stable/user-guide/tool_detection/#disable-built-in-tools)
- [github.com](https://github.com/argoproj/argo-cd/releases/tag/v3.3.15)
- [github.com](https://github.com/argoproj/argo-cd/releases/tag/v3.4.10)
- [github.com](https://github.com/argoproj/argo-cd/releases/tag/v3.5.4)
- [github.com](https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2)

---
Source page: https://erroneo.us/security/cve/CVE-2026-113672/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt