argoproj vulnerabilities

By year

Bars are flaws published each year; the red part is the share attackers have used.

Latest high and critical flaws

• CVE-2026-113709 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Critical 9.9 · Oct 20, 2026
• CVE-2026-113708 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Critical 9.9 · Oct 20, 2026
• CVE-2026-113672 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Critical 9.9 · Oct 20, 2026
• CVE-2026-77459 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Critical 9.9 · Oct 13, 2026
• CVE-2026-55797 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.High 8.8 · Oct 9, 2026
• CVE-2026-93991 Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access revHigh 8.3 · Sep 19, 2026
• CVE-2026-82277 Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protectionCritical 9.3 · Aug 28, 2026
• CVE-2026-54526 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.High 8.9 · Jul 16, 2026
• CVE-2026-45738 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.High 7.3 · Jul 15, 2026
• CVE-2026-15416 A flaw was identified in Argo CD, the GitOps engine used by Red Hat OpenShift GitOps, that could allow an unauthenticated attacker with network access to the ArHigh 8.9 · Jul 14, 2026
• CVE-2026-62185 Argo CD Helm Chart before 10.0.0 fails to install network policies by default, allowing any pod on a cluster to access repo-server and other Argo APIs.High 8.6 · Jul 13, 2026
• CVE-2026-42297 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.High 8.5 · May 9, 2026
• CVE-2026-42296 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.High 8.1 · May 9, 2026
• CVE-2026-42295 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.High 8.5 · May 9, 2026
• CVE-2026-42294 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.High 8.2 · May 9, 2026
• CVE-2026-42880 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.Critical 9.6 · May 7, 2026
• CVE-2026-43824 In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.High 7.7 · May 1, 2026
• CVE-2026-40886 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.High 7.7 · Apr 23, 2026
• CVE-2026-31892 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.High 8.9 · Mar 11, 2026
• CVE-2026-28229 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.Critical 9.8 · Mar 11, 2026
• CVE-2026-23960 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.High 7.3 · Jan 21, 2026
• CVE-2025-66626 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.High 8.1 · Dec 9, 2025
• CVE-2025-62157 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.High 8.5 · Oct 14, 2025
• CVE-2025-62156 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.High 8.1 · Oct 14, 2025
• CVE-2025-59538 Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes.High 7.5 · Oct 1, 2025