CVE-2026-62185CWE-1188

Argo CD Helm Chart < 10.0.0 Missing Network Policy RCE

High · published July 13, 2026

CVSS v4.0
8.6
EPSS
0%
Percentile
38.8
In the wild
Unconfirmed
What it is

Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs. Attackers can exploit this unrestricted network access through combined attacks to achieve cluster compromise and remote code execution.

The record
Technical detail
CVSS v4.0
8.6 · HIGH
Vector
CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:L/SC:N/SI:N/SA:N
EPSS
0.00460 · 38.8th percentile
Weakness
CWE-1188 · Initialization of a Resource with an Insecure Default
Published
2026-07-13T21:31Z
EPSS history
Timeline
  • 13 JUL 21:31Z
    Argo CD Helm Chart < 10.0.0 Missing Network Policy RCE
    cvelistv5