CVE-2026-15416 Details

A remote code execution vulnerability has been identified in the Argo CD repo-server component, which is used in Red Hat OpenShift GitOps. This vulnerability allows an unauthenticated attacker with network access to the repo-server's gRPC interface to execute arbitrary code. The issue arises because the repo-server's internal gRPC service lacks authentication, enabling exploitation by sending crafted requests. Once the code is executed, the attacker can manipulate cached data in Redis to deploy malicious Kubernetes resources, potentially compromising the entire cluster.

Users can update to Argo CD Helm Chart version 10.0.0, which includes the necessary network policy adjustments to protect the repo-server. For those using Argo CD without Helm, it's recommended to manually apply Kubernetes network policies that restrict access to the repo-server and Redis ports.