Read the docs

argoproj

Records88All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical21CVSS 9.0–10.0
CVSS high37CVSS 7.0–8.9

Exploited now

argoproj records in CISA KEV

No argoproj vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Argo Cd 57 records HIGH Argo Workflows 17 records HIGH

Records

17 records in Argo Workflows · all components

TI-2026-30604 CVE-2026-42295 · GHSA-7vf8-2cr6-54mf

Argo Workflows: Exposure of artifact repository credentials

Priority HIGH 72

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.

CVSS 4.0HIGH 8.5 Network High privileges No interaction EPSS 0.00357 Published 2026-05-09 Partial fix · 4.0.5 CWE-522
TI-2026-30605 CVE-2026-42296 · GHSA-3775-99mw-8rp4

Incorrect authorization in argoproj argo-workflows

Priority HIGH 70

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00424 Published 2026-05-09 Fixed in 3.7.14, 4.0.5 CWE-863
TI-2022-11708 CVE-2022-29164 · GHSA-cmv8-6362-r5w9

Privilege Escalation in argo-workflows

Priority LOW 35

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.

CVSS 3.1HIGH 7.1 Network Low privileges User interaction EPSS 0.00921 Published 2022-05-05 Fixed in 3.2.11, 3.3.5 CWE-269
TI-2021-15674 CVE-2021-37914 · GHSA-h563-xh25-x54q

In Argo Workflows through 3.1.3, if EXPRESSION_TEMPLATES is enabled and untrusted users…

Priority LOW 31

In Argo Workflows through 3.1.3, if EXPRESSION_TEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to disrupt a workflow because expression tem…

CVSS 3.1MEDIUM 6.5 Network No auth No interaction EPSS 0.00963 Published 2021-08-02 Fixed in 3.1.6 CWE-20
Open these records in search →