{"schema":"vulnpedia.research/1","cve":"CVE-2026-113672","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-m3vr-7329-44ww","tags":["x_refsource_CONFIRM","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-m3vr-7329-44ww"},{"source":"nvd","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-m3vr-7329-44ww"},{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-m3vr-7329-44ww"}]},{"url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3"},{"source":"nvd","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-3v3m-wc6v-x4x3"}]},{"url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-6gcg-hp2x-q54h","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-6gcg-hp2x-q54h"},{"source":"nvd","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/security/advisories/GHSA-6gcg-hp2x-q54h"}]},{"url":"https://github.com/argoproj/argo-cd/pull/561","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","url":"https://github.com/argoproj/argo-cd/pull/561"},{"source":"nvd","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/pull/561"}]},{"url":"https://github.com/argoproj/argo-cd/commit/27471d524958878e7acc5131fb466b292079cd05","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","url":"https://github.com/argoproj/argo-cd/commit/27471d524958878e7acc5131fb466b292079cd05"},{"source":"nvd","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/commit/27471d524958878e7acc5131fb466b292079cd05"}]},{"url":"https://argo-cd.readthedocs.io/en/stable/user-guide/tool_detection/#disable-built-in-tools","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","url":"https://argo-cd.readthedocs.io/en/stable/user-guide/tool_detection/#disable-built-in-tools"},{"source":"nvd","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:59:00.607","url":"https://argo-cd.readthedocs.io/en/stable/user-guide/tool_detection/#disable-built-in-tools"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15"},{"source":"nvd","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.3.15"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10"},{"source":"nvd","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.4.10"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4"},{"source":"nvd","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.5.4"}]},{"url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2","tags":["x_refsource_MISC"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-10-20T18:00:54.522Z","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2"},{"source":"nvd","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:59:00.607","url":"https://github.com/argoproj/argo-cd/releases/tag/v3.6.0-rc2"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113672.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113672.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-113672","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-113672"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2549691","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2549691"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-113672","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-113672"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113672","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-113672"}]},{"url":"https://github.com/argoproj/argo-cd/commit/d5dd7019e","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://github.com/argoproj/argo-cd/commit/d5dd7019e"}]},{"source":"euvd","sourceId":"EUVD-2026-105227","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105227","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-105227","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-105227"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113672.json","productId":"red_hat_openshift_data_foundation_4:odf4/odf-multicluster-rhel9-operator","product":"odf4/odf-multicluster-rhel9-operator as a component of Red Hat Openshift Data Foundation 4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odf-multicluster-rhel9-operator?repository_url=registry.redhat.io/odf4/odf-multicluster-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113672.json"}]},{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113672.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/argocd-agent-rhel9","product":"openshift-gitops-1/argocd-agent-rhel9 as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argocd-agent-rhel9?repository_url=registry.redhat.io/openshift-gitops-1/argocd-agent-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113672.json"}]},{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113672.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/argocd-image-updater-rhel9","product":"openshift-gitops-1/argocd-image-updater-rhel9 as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argocd-image-updater-rhel9?repository_url=registry.redhat.io/openshift-gitops-1/argocd-image-updater-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113672.json"}]},{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113672.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/argocd-rhel9","product":"openshift-gitops-1/argocd-rhel9 as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/argocd-rhel9?repository_url=registry.redhat.io/openshift-gitops-1/argocd-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113672.json"}]},{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113672.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/gitops-rhel9","product":"openshift-gitops-1/gitops-rhel9 as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/gitops-rhel9?repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113672.json"}]},{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113672.json","productId":"red_hat_openshift_gitops:openshift-gitops-1/gitops-rhel9-operator","product":"openshift-gitops-1/gitops-rhel9-operator as a component of Red Hat OpenShift GitOps","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/gitops-rhel9-operator?repository_url=registry.redhat.io/openshift-gitops-1/gitops-rhel9-operator","origins":[{"source":"redhat","sourceId":"CVE-2026-113672","modified":"2026-10-20T19:55:15+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-113672.json"}]}],"vendorCoverage":{"total":6,"shown":6,"omitted":0,"source":"redhat"}}