CVE-2026-113672 | Argo Project Argo CD up to 3.3.0/3.4.9/3.5.3/3.6.0-rc1 Repo-Server path traversal (EUVD-2026-105227)

October 20, 2026 Yanac

A vulnerability labeled as critical has been found in Argo Project Argo CD up to 3.3.0/3.4.9/3.5.3/3.6.0-rc1. Affected by this vulnerability is an unknown functionality of the component Repo-Server. Executing a manipulation can lead to path traversal.

This vulnerability is registered as CVE-2026-113672. It is possible to launch the attack remotely. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More