High severity · published Feb 4, 2022
CVE-2022-24348
Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go
7.7
CVSS
2.8%
EPSS
No
On KEV
Description
Argo CD before 2.1.9 and 2.2.x before 2.2.4 allows directory traversal related to Helm charts because of an error in helmTemplate in repository.go. For example, an attacker may be able to discover credentials stored in a YAML file.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)2.8% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
AC
Argo CD · Argoproj
before 2.1.9; 2.2.0 before 2.2.4 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2022-24348
CVE.org
https://www.cve.org/CVERecord?id=CVE-2022-24348
Exploit
https://apiiro.com/blog/malicious-kubernetes-helm-charts-can-be-used-to-steal-sensitive-information-from-argo-cd-deployments/
Exploit
https://github.com/argoproj/argo-cd/security/advisories/GHSA-63qx-x74g-jcr7
More from Argo CD
10.0
CVE-2022-29165
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes
9.9
CVE-2026-113709
Argo CD: A Kustomize Helm config home can run commands in the repo-server
9.9
CVE-2026-113708
Argo CD: A Kustomize remote ref can run commands in the repo-server
9.9
CVE-2026-113672
Argo CD: A Jsonnet import can read files from the repo-server
9.9
CVE-2026-77459
Argo CD: AppProject destination-namespace and resource restrictions bypassed by PreDelete/PostDelete resource hooks