CVE Intelligence

Argoproj Argo-rollouts vulnerabilities

🔔 Create alert RSS Version checker

Published CVEs affecting Argoproj Argo-rollouts: 1 record(s), with affected versions and fixes.

CVE-2026-82277 Critical · 9.8 CWE-306 Aug 28, 2026
Argo Rollouts Dashboard Unauthenticated Mutating Operations
Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout operations across all namespaces accessible to the operator's kubeconfig.