# CVE-2026-113709: Argo CD arbitrary code execution via Helm plugin download in Kustomize

Source: https://junglewise.ai/threats/cve-2026-113709-argo-cd-is-a-declarative-gitops-continuous-delivery-tool-for  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-10-20. Updated: 2026-10-20  
License: CC BY 4.0 with a link back

CVE-2026-113709 · Severity: critical · CVSS 9.9 · Published 2026-10-20

Argo CD is a continuous deployment tool that manages Kubernetes applications. When operators enable Helm support for Kustomize builds, attackers can commit malicious plugin files to a repository or upload them through the API to execute arbitrary code as the repo-server process, gaining access to sensitive credentials and repository data.

Technologies: [Argo Project Argo CD](https://junglewise.ai/threats/technologies/argo-cd). Vendors: [Argo Project](https://junglewise.ai/threats/vendors/argo-project).

## Quick answers

**Is CVE-2026-113709 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-113709 being exploited in the wild.

**How severe is CVE-2026-113709?** Critical severity, with a CVSS score of 9.9, published 20 October 2026.

**Which products and versions are affected?** Argo Project Argo CD 2.1.0 to 3.3.14, 3.4.0 to 3.4.9, 3.5.0 to 3.5.3, prior to 3.6.0-rc2.

**Is there a fix for CVE-2026-113709?** Yes: fixed in Argo CD 3.3.15, 3.4.10, 3.5.4, 3.6.0-rc2. Until then: Disable --enable-helm for Kustomize builds if not required, or restrict Application get permissions to trusted users only. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-113709 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-113709?** Check whether you run Argo Project Argo CD at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- Fixed in Argo CD 3.3.15, 3.4.10, 3.5.4, 3.6.0-rc2

Disable --enable-helm for Kustomize builds if not required, or restrict Application get permissions to trusted users only.

## Technical details

The vulnerability exists in how Argo CD handles Helm's helmGlobals.configHome setting when --enable-helm is configured for Kustomize builds. Helm automatically loads and executes downloader plugins from the .data/plugins directory without requiring a separate install step; an attacker can place a malicious plugin in a repository-controlled location or upload it via the manifestsWithFiles API endpoint. Exploitation requires only Application get permission and executes with repo-server process privileges, bypassing the need for repository write access or Application update/sync permissions.

## Affected products

- Argo Project Argo CD 2.1.0 to 3.3.14, 3.4.0 to 3.4.9, 3.5.0 to 3.5.3, prior to 3.6.0-rc2

## Timeline

- 2026-10-20: disclosed

## References

- [https://argo-cd.readthedocs.io/en/stable/user-guide/kustomize/](https://argo-cd.readthedocs.io/en/stable/user-guide/kustomize/)
- [https://github.com/argoproj/argo-cd/commit/b6d5c23bce2f8a46c52975ba438a3b93d242d96c](https://github.com/argoproj/argo-cd/commit/b6d5c23bce2f8a46c52975ba438a3b93d242d96c)

## Related threats

- [Argo CD repo-server command injection via SSH proxy URL](https://junglewise.ai/threats/cve-2026-55797-argo-cd-repo-server-command-injection-via-crafted-ssh-repository)
- [Argo CD stored XSS in application link annotations](https://junglewise.ai/threats/cve-2026-45738-argo-cd-stored-xss-in-application-link-annotations)
- [Argo CD information exposure in ServerSideDiff](https://junglewise.ai/threats/cve-2026-45737-argo-cd-information-exposure-in-serversidediff)
- [Argo CD information disclosure in ServerSideDiff endpoint](https://junglewise.ai/threats/cve-2026-42880-argo-cd-information-disclosure-in-serversidediff-endpoint)
- [Argo CD information disclosure in ServerSideDiff endpoint](https://junglewise.ai/threats/cve-2026-43824-argo-cd-information-disclosure-in-serversidediff-endpoint)