CVE-2026-62185Disclosure

LOWCVSS 8.6 · HIGH

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Patch affected systems immediately

Recommended action window: Monitor and triage in normal cycle

NVD description

Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs. Attackers can exploit this unrestricted network access through combined attacks to achieve cluster compromise and remote code execution.

0.5/ 10 priority

Sources & remediation

Weakness type (CWE)
CWE-1188

Priority

LOW

Exploitation

NONE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Threat summary

  • Patch or workaround signal is available
  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Patch or workaround mentioned in 1 signal
  • Technical details provided in 1 signal
  • Disclosure: 1 classified signal
  • Peaked 1d ago at 1 mentions (2026-07-14); latest day: 1
  • 2 total mentions across 2 days

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-07-14: 1Mentions · 2026-07-15: 1Patch / Workaround · 2026-07-15: 1Technical Details · 2026-07-14: 107-1407-15
Signal classification2 categories
Disclosure
150.0%
Patch
150.0%
Classification over time
DateTotalLabels
2026-07-141
Disclosure1
2026-07-151
Patch1
Full discourse2 posts
  • Mohi@disismohi
    Disclosure

    CVE-2026-62185: Argo CD @argoproj Helm chart before 10.0.0 ships with zero network policies. Any pod on your cluster can hit repo-server. Combined attacks = RCE. Here's what to check Tuesday.

    Post summary

    The text announces CVE‑2026‑62185, noting that Argo CD Helm charts before 10.0.0 lack network policies, allowing intra‑cluster pods to reach the repo‑server and potentially enable RCE, but provides no exploit code, patch info, or evidence of active attacks.

    1000069
    72 followersView on X
  • Merge News@mergenewsapp
    Patch

    A critical Argo CD Helm Chart vulnerability (CVE-2026-62185) exposes Kubernetes clusters; upgrade to v10.0.0+ or add network policies to fix #kubernetes #helm #security #cve

    Post summary

    The post announces a critical Argo CD Helm Chart vulnerability (CVE-2026-62185) and recommends upgrading to v10.0.0+ or adding network policies as a mitigation.

    0000037
    22 followersView on X

Explore more