CVE-2026-62185 describes a vulnerability in the Argo CD Helm Chart prior to version 10.0.0 where network policies are not installed by default. This results in an insecure default configuration that permits any pod in the cluster to communicate with the repo-server and other Argo APIs without restriction. The lack of network segmentation increases the attack surface, enabling attackers to leverage this access in combination with other exploits to compromise the Kubernetes cluster and execute code remotely. The CVSS 4.0 score of 8.6 reflects a high severity with attack vector being adjacent network, low attack complexity, and no user interaction required.

The vulnerability allows unauthorized pods within the cluster to access critical Argo CD components, such as the repo-server and APIs. This can lead to cluster compromise and remote code execution if attackers chain this access with other vulnerabilities or misconfigurations. The impact is significant as it undermines the isolation and security boundaries within the Kubernetes environment managed by Argo CD.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or update is available, users should manually configure and enforce network policies to restrict pod-to-pod communication and limit access to the repo-server and Argo APIs. Monitoring vendor channels for updates regarding an official fix or recommended configuration changes is advised.