Product by Open Source
Argo Cd
7 known vulnerabilities in Argo Cd (Open Source), 0 of them actively exploited (CISA KEV).
Key figures
7
Vulnerabilities
0
Actively exploited (KEV)
0
Used by ransomware
3
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| High | CVE-2026-55797 | Argo CD repo-server command injection via crafted SSH repository SOCKS5 proxy URL | 8.8 | |
| Critical | CVE-2026-113672 | Argo CD: A Jsonnet import can read files from the repo-server | 9.9 | |
| Critical | CVE-2026-77459 | Argoproj Argo-cd: Incorrect Authorization | 9.9 | |
| Critical | CVE-2026-42880 | ArgoCD ServerSideDiff is vulnerable to Kubernetes Secret Extraction | 9.6 | |
| High | CVE-2026-45738 | Argo CD: Stored XSS in application link annotations enables developer-to-admin privilege escalation | 8.7 | |
| High | CVE-2025-61560 | open source Argo CD: Race Condition | 8.1 | |
| Medium | CVE-2026-45737 | Argo CD: Kubernetes Secret Extraction via ArgoCD ServerSideDiff via sensitive annotations | 6.5 |