Argoproj

Argo Cd

59 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.8

CVE-2026-55797

  • EPSS 1.55%
  • Veröffentlicht 09.10.2026 16:43:35
  • Zuletzt bearbeitet 09.10.2026 18:17:08

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 2.11.0 until 3.3.15, 3.4.10, 3.5.4, and 3.6.0-rc2, the Argo CD repo-server is vulnerable to command injection when it clones, tests, or fetches an SSH Git repository confi...

8.7

CVE-2026-45738

Exploit
  • EPSS 0.39%
  • Veröffentlicht 15.07.2026 20:17:05
  • Zuletzt bearbeitet 20.07.2026 02:06:47

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to 3.2.12, 3.3.10, and 3.4.2, Argo CD users with application write access can set link.argocd.argoproj.io/* annotations whose pipe-separated values are rendered by ui/src...

6.5

CVE-2026-45737

Exploit
  • EPSS 0.36%
  • Veröffentlicht 15.07.2026 20:17:04
  • Zuletzt bearbeitet 20.07.2026 02:09:23

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 3.2.0 until 3.2.12, 3.3.10, and 3.4.2, Argo CD ServerSideDiff can expose Kubernetes Secret values embedded in the kubectl.kubernetes.io/last-applied-configuration annotati...

9.6

CVE-2026-42880

Medienbericht Exploit
  • EPSS 0.51%
  • Veröffentlicht 07.05.2026 22:20:39
  • Zuletzt bearbeitet 07.09.2026 13:19:49

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing authorization and data-masking gap in Argo CD's ServerSideDiff endpoint that allows an attack...

9.6

CVE-2026-43824

Medienbericht
  • EPSS 0.23%
  • Veröffentlicht 02.05.2026 01:20:33
  • Zuletzt bearbeitet 15.07.2026 02:21:45

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.

7.5

CVE-2025-59538

Exploit
  • EPSS 8.34%
  • Veröffentlicht 01.10.2025 21:16:43
  • Zuletzt bearbeitet 12.10.2026 15:10:00

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the...

7.5

CVE-2025-59537

Exploit
  • EPSS 0.56%
  • Veröffentlicht 01.10.2025 21:16:43
  • Zuletzt bearbeitet 12.10.2026 15:10:00

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server a...

7.5

CVE-2025-59531

Exploit
  • EPSS 0.55%
  • Veröffentlicht 01.10.2025 21:16:43
  • Zuletzt bearbeitet 12.10.2026 15:10:00

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server a...

5.3

CVE-2025-55191

  • EPSS 0.44%
  • Veröffentlicht 30.09.2025 23:15:29
  • Zuletzt bearbeitet 07.10.2025 13:11:21

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0-rc1, 3.1.0-rc1 through 3.1.7, and 3.0.0-rc1 through 3.0.18 contain a race condition in the repository credentials handler that can cau...

9.9

CVE-2025-55190

Medienbericht Exploit
  • EPSS 5.34%
  • Veröffentlicht 04.09.2025 22:37:52
  • Zuletzt bearbeitet 19.09.2025 15:20:53

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to retrieve sens...