Akuity vulnerabilities
We track 3 vulnerabilities in Akuity products. 3 are rated high or critical, and none are known to be exploited. The most recent was published on October 30, 2026.
Latest Akuity vulnerabilities
- 9.3 Critical severity
kargo: Improper Privilege Management
Kargo manages and automates the promotion of software artifacts. From 0.6.0 until 1.8.14, 1.9.9, and 1.10.8, two authorization flaws in the `project-scoped RBAC API` let an authenticated user with delegated permission to manage a Project's `Roles` or `ServiceA
- 9.9 Critical severity
kargo: Incorrect Authorization
Kargo manages and automates the promotion of software artifacts. From 1.7.0 to before v1.7.8, v1.8.11, and v1.9.3, the batch resource creation endpoints of both Kargo's legacy gRPC API and newer REST API accept multi-document YAML payloads. Specially crafted p
- 7.2 High severity
kargo: Incorrect Authorization
Kargo manages and automates the promotion of software artifacts. Prior to versions 1.8.7, 1.7.7, and 1.6.3, a bug was found with authentication checks on the `GetConfig()` API endpoint. This allowed unauthenticated users to access this endpoint by specifying a