tocsin

Go/github.com/argoproj/argo-cd/v3 CVE-2026-55797: high 8.8, EPSS 1.55%

Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

Action: Upgrade github.com/argoproj/argo-cd/v3 to 3.3.15 or later.

go get github.com/argoproj/argo-cd/v3@v3.3.15
go get github.com/argoproj/argo-cd/v3@v3.4.10
go get github.com/argoproj/argo-cd/v3@v3.5.4
go get github.com/argoproj/argo-cd/v3@v3.6.0-rc2

Affected

introducedfixedlast affected
3.0.03.3.15-
3.4.03.4.10-
3.5.03.5.4-
3.6.0-rc13.6.0-rc2-

Fixed versions

3.3.153.4.103.5.43.6.0-rc2

Sources

CVE-2026-55797 · published · modified · JSON