Login Request a demo
AR
Product
argo-workflows
by argoproj · last CVE Sep 19, 2026
18
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 1High 11Medium 6Low 0
Severity
All severities18Critical1High11Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add argo-workflows to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2026-54526
9.9
1%
Jul 16
Argo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencing
Affected: < 3.7.15; >= 4.0.0, < 4.0.6
CVE-2025-62156
8.8
1%
Oct 14
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
Affected: before 3.6.12; 3.7.0 before 3.7.3
CVE-2026-42297
8.3
1%
May 9
Argo Workflows Is Missing Authorization in Sync ConfigMap Provider
Affected: >= 4.0.0, < 4.0.5
CVE-2026-42296
8.1
0%
May 9
Argo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure
Affected: < 3.7.14; >= 4.0.0, < 4.0.5
CVE-2026-31892
8.1
1%
Mar 11
WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode
Affected: >= 4.0.0, < 4.0.2; >= 2.9.0, < 3.7.11
CVE-2026-93991
7.7
0%
Sep 19
Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector
Affected: 4.1.0 before 4.1.4
CVE-2026-40886
7.7
0%
Apr 23
Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller
Affected: >= 4.0.0, < 4.0.5; >= 3.7.0, < 3.7.14; >= 3.6.5, <= 3.6.19
CVE-2026-42294
7.5
1%
May 9
Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor
Affected: < 3.7.14; >= 4.0.0, < 4.0.5
CVE-2026-28229
7.5
1%
Mar 11
Argo Workflows has unauthorized access to Argo Workflows Template
Affected: >= 4.0.0, < 4.0.2; < 3.7.11
CVE-2025-66626
7.5
1%
Dec 9
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
Affected: before 3.6.14; 3.7.0 before 3.7.5
CVE-2024-53862
7.5
1%
Dec 2
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
Affected: 3.5.7 before 3.5.13; 3.6.0 before 3.6.2
CVE-2022-29164
7.1
1%
May 6
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
Affected: 2.6.0 before 3.2.11; 3.3.0 before 3.3.5
CVE-2026-42183
6.5
0%
May 9
Argo Workflows: SSO RBAC Delegation Nil Pointer Dereference DoS (gatekeeper.go)
Affected: >= 4.0.0, < 4.0.5
CVE-2025-62157
6.5
0%
Oct 14
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
Affected: before 3.6.12; 3.7.0 before 3.7.3
CVE-2021-37914
6.5
1%
Aug 3
In Argo Workflows through 3.1.3, if EXPRESSION_TEMPLATES is enabled and untrusted users are allowed to specify input parameters when running workflows, an attacker may be able to…
Affected: through 3.1.3
CVE-2026-23960
5.4
0%
Jan 21
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
Affected: before 3.6.17; 3.7.0 before 3.7.8
CVE-2026-42295
4.9
0%
May 9
Argo Workflows: Exposure of artifact repository credentials
Affected: >= 4.0.0, < 4.0.5
CVE-2024-47827
4.8
0%
Oct 28
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
Affected: 3.6.0
Showing 18