CVE-2026-113708 | Argo Project Argo CD up to 3.3.14/3.4.9/3.5.3/3.6.0-rc1 Kustomize manifestsWithFiles os command injection

October 20, 2026 Yanac

A vulnerability was found in Argo Project Argo CD up to 3.3.14/3.4.9/3.5.3/3.6.0-rc1. It has been rated as critical. Affected by this vulnerability is an unknown functionality of the file /api/v1/applications/manifestsWithFiles of the component Kustomize. Performing a manipulation results in os command injection.

This vulnerability is identified as CVE-2026-113708. The attack can be initiated remotely. There is not any exploit available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More