Log in Start free

Vulnerability · Published Jul 14, 2026 · Assigned by redhat

CVE-2026-15416Argo-cd: argo cd unauthenticated remote code execution in repo-server via generatemanifest grpc endpoint

High 8.9

In plain English

A high-severity missing authentication in argo-helm from argoproj. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 40% of all known vulnerabilities).

Severity (CVSS 3.1)8.9High
Exploit odds (30 days)0.5%top 59.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could allow an unauthenticated attacker with network access to the Argo CD repo-server to achieve remote code execution. Under certain conditions, the attacker may then manipulate cached data to deploy malicious Kubernetes resources to managed clusters, potentially resulting in complete cluster compromise.

Affected products (as reported)

VendorProductVersions
argoproj argo-helm 0 – before 10.0.0
Red Hat Red Hat OpenShift GitOps 1.19 see references
Red Hat Red Hat OpenShift GitOps 1.19 see references
Red Hat Red Hat Openshift Data Foundation 4 see references
Red Hat Red Hat OpenShift GitOps see references
Red Hat Red Hat OpenShift GitOps see references
Red Hat Red Hat OpenShift GitOps see references
Red Hat Red Hat OpenShift GitOps see references
Red Hat Red Hat OpenShift GitOps see references
Red Hat Red Hat OpenShift GitOps see references
Red Hat Red Hat OpenShift GitOps see references
Red Hat Red Hat OpenShift GitOps see references
Red Hat Red Hat OpenShift GitOps see references

Weakness: CWE-306 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

References