Medium severity · published May 8, 2026
CVE-2026-42350
Kargo: Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter
5.1
CVSS
0.3%
EPSS
No
On KEV
Description
Kargo manages and automates the promotion of software artifacts. Prior to versions 1.7.10, 1.8.13, 1.9.8, and 1.10.2, Kargo is vulnerable to open redirect in UI OIDC login flow via the redirectTo query parameter. This issue has been patched in versions 1.7.10, 1.8.13, 1.9.8, and 1.10.2.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 24% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KA
kargo · akuity
< 1.7.10; >= 1.8.0-rc.1, < 1.8.13; >= 1.9.0-rc.1, < 1.9.8; >= 1.10.0-rc.1, < 1.10.2 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-42350
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-42350
github.com
https://github.com/akuity/kargo/security/advisories/GHSA-g7gw-m874-7rmf
More from kargo
9.9
CVE-2026-27112
Kargo has an Authorization Bypass Vulnerability in Batch Resource Creation API Endpoints
7.2
CVE-2026-24748
Kargo's `GetConfig()` and `RefreshResource()` API endpoints allow unauthenticated access
5.0
CVE-2026-27111
Kargo has Missing Authorization Vulnerabilities in Approval & Promotion REST API Endpoints
4.9
CVE-2026-32828
Kargo: SSRF in Promotion http/http-download Steps Enables Internal Network Access and Data Exfiltration