Product by Open Source

    Argo Cd

    7 known vulnerabilities in Argo Cd (Open Source), 0 of them actively exploited (CISA KEV).

    Key figures

    7

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    3

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Argo Cd (Open Source)
    HighCVE-2026-55797

    Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL

    also in 4 other products

    8.8
    CriticalCVE-2026-113672

    Argo CD: A Jsonnet import can read files from the repo-server

    also in 1 other product

    9.9
    CriticalCVE-2026-77459

    Argoproj Argo-cd: Incorrect Authorization

    also in 4 other products

    9.9
    CriticalCVE-2026-42880

    ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction

    also in 2 other products

    9.6
    HighCVE-2026-45738

    Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation

    also in 4 other products

    8.7
    HighCVE-2025-61560

    open source Argo CD: Race Condition

    8.1
    MediumCVE-2026-45737

    Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations

    also in 2 other products

    6.5

    News

    All products by Open Source