Veille CVE

Recherche « argoproj argo-helm »

2 CVE

Critique 0 Élevée 2 Moyenne 0 Faible 0 Non évaluée 0 Exploitées (KEV) Tri : plus récentes « argoproj argo-helm » ✕
  1. CVE-2026-15416 8.9 Élevée

    argoproj argo-helm · Red Hat OpenShift GitOps 1.19 · Red Hat Openshift Data Foundation 4 · Red Hat OpenShift GitOps

    A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could allow an unauthenticated attacker with network access to the Argo CD repo-server to achieve remote code execution. Under certain conditions, the attacker may then manipulate cached data to deploy malicious Kubernetes resources to managed clusters, potentially resulting in complete cluster compromise.

  2. CVE-2026-62185 7.6 Élevée

    argoproj argo-helm

    Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs. Attackers can exploit this unrestricted network access through combined attacks to achieve cluster compromise and remote code execution.