Argoproj

Argo Cd

58 Schwachstellen gefunden.

Hinweis: Diese Liste kann unvollständig sein. Daten werden ohne Gewähr im Ursprungsformat bereitgestellt.
8.7

CVE-2026-45738

Exploit
  • EPSS 0.39%
  • Veröffentlicht 15.07.2026 20:17:05
  • Zuletzt bearbeitet 20.07.2026 02:06:47

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to 3.2.12, 3.3.10, and 3.4.2, Argo CD users with application write access can set link.argocd.argoproj.io/* annotations whose pipe-separated values are rendered by ui/src...

6.5

CVE-2026-45737

Exploit
  • EPSS 0.36%
  • Veröffentlicht 15.07.2026 20:17:04
  • Zuletzt bearbeitet 20.07.2026 02:09:23

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From 3.2.0 until 3.2.12, 3.3.10, and 3.4.2, Argo CD ServerSideDiff can expose Kubernetes Secret values embedded in the kubectl.kubernetes.io/last-applied-configuration annotati...

9.6

CVE-2026-42880

Medienbericht Exploit
  • EPSS 0.51%
  • Veröffentlicht 07.05.2026 22:20:39
  • Zuletzt bearbeitet 17.08.2026 12:18:36

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. From versions 3.2.0 to before 3.2.11 and 3.3.0 to before 3.3.9, there is a missing authorization and data-masking gap in Argo CD's ServerSideDiff endpoint that allows an attack...

9.6

CVE-2026-43824

Medienbericht
  • EPSS 0.23%
  • Veröffentlicht 02.05.2026 01:20:33
  • Zuletzt bearbeitet 15.07.2026 02:21:45

In Argo CD 3.2.0 before 3.2.11 and 3.3.0 before 3.3.9, ServerSideDiff allows reading cleartext Kubernetes Secret data.

7.5

CVE-2025-59538

Exploit
  • EPSS 8.34%
  • Veröffentlicht 01.10.2025 21:16:43
  • Zuletzt bearbeitet 07.10.2025 14:28:49

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. For versions 2.9.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.6 and 3.0.17, when the webhook.azuredevops.username and webhook.azuredevops.password are not set in the...

7.5

CVE-2025-59537

Exploit
  • EPSS 0.56%
  • Veröffentlicht 01.10.2025 21:16:43
  • Zuletzt bearbeitet 07.10.2025 14:34:45

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server a...

7.5

CVE-2025-59531

Exploit
  • EPSS 0.55%
  • Veröffentlicht 01.10.2025 21:16:43
  • Zuletzt bearbeitet 07.10.2025 14:39:29

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions 1.2.0 through 1.8.7, 2.0.0-rc1 through 2.14.19, 3.0.0-rc1 through 3.2.0-rc1, 3.1.7 and 3.0.18 are vulnerable to malicious API requests which can crash the API server a...

5.3

CVE-2025-55191

  • EPSS 0.44%
  • Veröffentlicht 30.09.2025 23:15:29
  • Zuletzt bearbeitet 07.10.2025 13:11:21

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions between 2.1.0 and 2.14.19, 3.2.0-rc1, 3.1.0-rc1 through 3.1.7, and 3.0.0-rc1 through 3.0.18 contain a race condition in the repository credentials handler that can cau...

9.9

CVE-2025-55190

Medienbericht Exploit
  • EPSS 5.34%
  • Veröffentlicht 04.09.2025 22:37:52
  • Zuletzt bearbeitet 19.09.2025 15:20:53

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. In versions 2.13.0 through 2.13.8, 2.14.0 through 2.14.15, 3.0.0 through 3.0.12 and 3.1.0-rc1 through 3.1.1, API tokens with project-level permissions are able to retrieve sens...

5.4

CVE-2025-47933

  • EPSS 0.44%
  • Veröffentlicht 29.05.2025 19:30:39
  • Zuletzt bearbeitet 27.08.2025 02:28:01

Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Prior to versions 2.13.8, 2.14.13, and 3.0.4, an attacker can perform arbitrary actions on behalf of the victim via the API. Due to the improper filtering of URL protocols in t...