CVE-2026-113708 - Argo CD: A Kustomize remote ref can run commands in the repo-server
CVE ID :CVE-2026-113708 Published : Oct. 20, 2026, 7:17 p.m. | 48 minutes ago Description :Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.7.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, Kustomize passes ref or version query values from remote resource, base,...