argo-rollouts vulnerabilities

1 known vulnerability in argo-rollouts from Argoproj. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.8 Critical severity

  argo-rollouts: Missing Authentication for Critical Functionality

  CVE-2026-82277Aug 28, 2026Argoproj

  Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutI