Login Request a demo
AR
Product
argo-workflows
by argoproj · last CVE Sep 19, 2026
18
CVEs
0
On KEV
9.9
Max CVSS
0
New 30D
Vulnerabilities18In the news0Timeline
Severity mix
Critical 1High 11Medium 6Low 0
Severity
All severities18Critical1High11Medium6Low0
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add argo-workflows to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2025-62156
8.8
1%
Oct 14
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
Affected: before 3.6.12; 3.7.0 before 3.7.3
CVE-2026-42297
8.3
1%
May 9
Argo Workflows Is Missing Authorization in Sync ConfigMap Provider
Affected: >= 4.0.0, < 4.0.5
CVE-2026-42296
8.1
0%
May 9
Argo Workflows has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure
Affected: < 3.7.14; >= 4.0.0, < 4.0.5
CVE-2026-31892
8.1
1%
Mar 11
WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode
Affected: >= 4.0.0, < 4.0.2; >= 2.9.0, < 3.7.11
CVE-2026-93991
7.7
0%
Sep 19
Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector
Affected: 4.1.0 before 4.1.4
CVE-2026-40886
7.7
0%
Apr 23
Argo Workflows: Unchecked annotation parsing in pod informer crashes Argo Workflows controller
Affected: >= 4.0.0, < 4.0.5; >= 3.7.0, < 3.7.14; >= 3.6.5, <= 3.6.19
CVE-2026-42294
7.5
1%
May 9
Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor
Affected: < 3.7.14; >= 4.0.0, < 4.0.5
CVE-2026-28229
7.5
1%
Mar 11
Argo Workflows has unauthorized access to Argo Workflows Template
Affected: >= 4.0.0, < 4.0.2; < 3.7.11
CVE-2025-66626
7.5
1%
Dec 9
argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links
Affected: github.com/argoproj/argo-workflows/v3 >= 3.7.0, < 3.7.5; github.com/argoproj/argo-workflows/v3 < 3.6.14; github.com/argoproj/argo-workflows <= 2.5.3-rc4
CVE-2024-53862
7.5
1%
Dec 2
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
Affected: 3.5.7 before 3.5.13; 3.6.0 before 3.6.2
CVE-2022-29164
7.1
1%
May 6
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
Affected: 2.6.0 before 3.2.11; 3.3.0 before 3.3.5
Showing 11