CVE-2026-62185 is a vulnerability in the Argo CD Helm Chart (argo-helm) where versions prior to 10.0.0 fail to install network policies by default. This results in unrestricted network access from any pod in the cluster to the repo-server and other Argo APIs. The lack of network segmentation can be leveraged by attackers to perform combined attacks that may lead to cluster compromise and remote code execution. The CVSS 4.0 score is 8.6, indicating a high severity vulnerability with attack vector as adjacent network, low attack complexity, and no user interaction required.

The vulnerability allows any pod within the Kubernetes cluster to access critical Argo CD components such as the repo-server and APIs without network restrictions. This can facilitate combined attack scenarios that may lead to full cluster compromise and remote code execution, posing a significant risk to the confidentiality, integrity, and availability of the cluster environment.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix or patch is available, users should manually configure network policies to restrict pod-to-pod communication and limit access to Argo CD components. Monitoring vendor communications for updates on remediation is recommended.