{"id":"CVE-2026-55797","kind":"vulnerability","aliases":["CVE-2026-55797","GHSA-j6cw-g6p4-7hch","GO-2026-6701"],"related":[],"title":"Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL in github.com/argoproj/argo-cd","description":"Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository configured with a proxy URL. The proxy host and port are embedded in an SSH ProxyCommand that is executed through a shell without neutralizing shell metacharacters. A user who can create or update a repository or repository credential template can supply a crafted proxy host to execute commands in the repo-server and access its Git, Helm, and OCI credentials. This issue is fixed in versions 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2.","summary":"Argo CD's repo-server builds an SSH ProxyCommand from a repository's proxy host and port and runs it through a shell without escaping metacharacters. A user who can create or update a repository or repository credential template can inject shell commands that run inside the repo-server and reach its stored Git, Helm, and OCI credentials.","severity":"high","cvss":8.8,"epss":0.01548,"exploited":false,"exploited_at":null,"products":[{"name":"github.com/argoproj/argo-cd","fixed":[],"affected":"all versions","ecosystem":"go"},{"name":"github.com/argoproj/argo-cd/v2","fixed":[],"affected":">= 2.11.0","ecosystem":"go"},{"name":"github.com/argoproj/argo-cd/v3","fixed":["3.3.15","3.4.10","3.5.4","3.6.0-rc2"],"affected":">= 3.6.0-rc1, < 3.6.0-rc2","ecosystem":"go"}],"ecosystems":["go"],"tags":["argo-cd","gitops","go","kubernetes","package"],"not_affected_if":["default-config","no-ssh-proxy-repos","versions-before-2.11.0"],"how_to_check":"Check the Argo CD version with the repo-server image tag or the argocd version command; affected if below 3.3.15, 3.4.10, 3.5.4, or 3.6.0-rc2 (for 2.x, any version from 2.11.0 onward is affected per the sources).\nReview Repository and repository credential template objects for SSH repos with a proxy URL set and check who can edit them.","fix":"Upgrade Argo CD to 3.3.15, 3.4.10, 3.5.4, 3.6.0-rc2 or later; the sources do not list a fixed 2.x release.\nRestrict who can create or update repositories and repository credential templates, and rotate Git, Helm, and OCI credentials if untrusted users had that access.","status":"open","published_at":"2026-10-09T17:16:47+00:00","first_seen_at":"2026-10-23T19:13:08+00:00","triaged_at":"2026-10-23T19:51:23+00:00","updated_at":"2026-10-23T19:51:23+00:00","category":"package","confidence":0.7,"triage":{"at":"2026-10-23T19:51:23Z","model":"claude-haiku-5-5","output":{"fix":"Upgrade Argo CD to 3.3.15, 3.4.10, 3.5.4, 3.6.0-rc2 or later; the sources do not list a fixed 2.x release.\nRestrict who can create or update repositories and repository credential templates, and rotate Git, Helm, and OCI credentials if untrusted users had that access.","summary":"Argo CD's repo-server builds an SSH ProxyCommand from a repository's proxy host and port and runs it through a shell without escaping metacharacters. A user who can create or update a repository or repository credential template can inject shell commands that run inside the repo-server and reach its stored Git, Helm, and OCI credentials.","category":"package","who_cares":["argo-cd","kubernetes","gitops","go"],"confidence":0.7,"analyst_note":"Sources do not give a 2.x fixed version or a how-to-check command; confirm the 2.x fix status at the govuln entry https://pkg.go.dev/vuln/GO-2026-6701 and the GHSA advisory.","how_to_check":"Check the Argo CD version with the repo-server image tag or the argocd version command; affected if below 3.3.15, 3.4.10, 3.5.4, or 3.6.0-rc2 (for 2.x, any version from 2.11.0 onward is affected per the sources).\nReview Repository and repository credential template objects for SSH repos with a proxy URL set and check who can edit them.\nunknown","needs_analyst":true,"not_affected_if":["default-config","no-ssh-proxy-repos","versions-before-2.11.0"],"severity_if_unknown":"high"},"cost_usd":0.000521,"input_tokens":2435,"output_tokens":555,"severity_before":"high"},"analyst_status":null,"analyst_note":null,"search":"'-2026':20A,28A,31A '-55797':21A,32A '-6701':29A '/argoproj/argo-cd':18A,35A '/argoproj/argo-cd/v2':38A '/argoproj/argo-cd/v3':41A '2.11.0':121C '3.3.15':123C,217C '3.4.10':124C,218C '3.5.4':125C,219C '3.6.0':127C,221C '7hch':26A 'access':204C 'argo':1A,43B,49B,109C,130C 'argo-cd':42B 'build':55B 'cd':2A,44B,50B,110C,131C 'clone':142C 'command':6A,92B,138C,197C 'configur':150C 'continu':115C 'craft':9A,192C 'creat':80B,180C 'credenti':87B,108B,187C,210C 'cve':19A,30A 'declar':113C 'deliveri':116C 'embed':161C 'escap':74B 'execut':168C,196C 'fetch':145C 'fix':214C 'g6p4':25A 'ghsa':23A 'ghsa-j6cw-g6p4-7hch':22A 'git':104B,148C,206C 'github.com':17A,34A,37A,40A 'github.com/argoproj/argo-cd':16A,33A 'github.com/argoproj/argo-cd/v2':36A 'github.com/argoproj/argo-cd/v3':39A 'gitop':45B,114C 'go':27A,46B 'helm':105B,207C 'host':64B,157C,194C 'inject':7A,90B,139C 'insid':95B 'issu':212C 'j6cw':24A 'kubernet':47B,119C 'metacharact':75B,175C 'neutral':173C 'oci':107B,209C 'packag':48B 'port':66B,159C 'proxi':13A,63B,153C,156C,193C 'proxycommand':58B,165C 'rc2':128C,222C 'reach':101B 'repo':4A,53B,98B,133C,201C 'repo-serv':3A,52B,97B,132C,200C 'repositori':11A,61B,84B,86B,149C,184C,186C 'run':68B,94B 'server':5A,54B,99B,134C,202C 'shell':72B,91B,171C,174C 'socks5':12A 'ssh':10A,57B,147C,164C 'store':103B 'suppli':190C 'templat':88B,188C 'test':143C 'tool':117C 'updat':82B,182C 'url':14A,154C 'user':77B,177C 'version':216C 'via':8A 'vulner':136C 'without':73B,172C","nicknames":[],"mitigations":[],"who_affected":null,"tier":null,"verified":{},"analyst_revisit_at":null,"first_public_at":"2026-10-09T17:16:47+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"security-advisories@github.com","poc_count":0,"sources":[{"source":"govuln","external_id":"GO-2026-6701","url":"https://pkg.go.dev/vuln/GO-2026-6701","severity":null,"published_at":"2026-10-19T21:08:26+00:00","modified_at":"2026-10-19T21:08:26+00:00","first_seen_at":"2026-10-23T19:13:08+00:00","fetched_at":"2026-10-23T19:13:08+00:00","note":null},{"source":"epss","external_id":"CVE-2026-55797","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-55797","severity":null,"published_at":null,"modified_at":null,"first_seen_at":"2026-10-23T19:13:43+00:00","fetched_at":"2026-10-23T19:13:43+00:00","note":null},{"source":"nvd","external_id":"CVE-2026-55797","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-55797","severity":null,"published_at":"2026-10-09T17:16:47+00:00","modified_at":"2026-10-09T18:17:08+00:00","first_seen_at":"2026-10-23T19:35:23+00:00","fetched_at":"2026-10-23T19:35:23+00:00","note":null}],"documents":[],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}