Product by Argo CD

    Argo-workflows

    18 known vulnerabilities in Argo-workflows (Argo CD), 0 of them actively exploited (CISA KEV).

    Key figures

    18

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    2

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Argo-workflows (Argo CD)
    CriticalCVE-2026-54526

    Argoproj Argo-workflows: Improper Access Control

    also in 2 other products

    		9.9
    CriticalCVE-2026-28229

    Argo Workflows has unauthorized access to Argo Workflows Template

    also in 2 other products

    		9.8
    HighCVE-2026-93991

    Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector

    		7.7
    HighCVE-2026-42294

    Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor

    also in 2 other products

    		7.5
    HighCVE-2025-66626

    argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links

    		8.1
    HighCVE-2026-31892

    WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode

    		8.1
    HighCVE-2026-42297

    Argo Workflows Is Missing Authorization in Sync ConfigMap Provider

    also in 1 other product

    		8.3
    HighCVE-2025-62156

    Argoproj Argo-workflows: Path Traversal

    		8.1
    HighCVE-2026-42296

    Argoproj Argo-workflows: Incorrect Authorization

    also in 2 other products

    		8.1
    HighCVE-2025-62157

    Argo Workflows exposes artifact repository credentials in workflow-controller logs

    		6.5
    HighCVE-2026-42295

    Argo Workflows: Exposure of artifact repository credentials

    also in 1 other product

    		4.9
    HighCVE-2024-53862

    Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode

    also in 1 other product

    		7.5
    HighCVE-2022-29164

    Privilege Escalation in argo-workflows

    also in 1 other product

    		7.1
    HighCVE-2026-40886

    Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller

    also in 2 other products

    		7.7
    MediumCVE-2021-37914

    Argoproj Argo Workflows: security vulnerability

    also in 1 other product

    		6.5
    HighCVE-2026-23960

    Argo Workflows affected by stored XSS in the artifact directory listing

    also in 1 other product

    		5.4
    MediumCVE-2026-42183

    Argo Workflows: SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)

    also in 1 other product

    		6.5
    MediumCVE-2024-47827

    Argo Workflows Controller: Denial of Service via malicious daemon Workflows

    also in 1 other product

    		5.7

    All products by Argo CD