AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

argo-workflowsGO-2022-0405

argo-workflows: privilege escalation

argo-workflows

Published Aug 21, 2024 · updated Mar 3, 2026

Unrated
No fix yet
Source advisory

Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with --auth-mode=client in github.com/argoproj/argo-workflows

Affected versions

PackageAffectedFixed in
github.com/argoproj/argo-workflows
Go
all versionsNo fix yet
Details and references
Severity from
no source yet
Also known as
GHSA-prqf-xr2j-xf65

More argo-workflows advisories

All argo-workflows
Medium 6.5Nov 5, 2025Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflowsCVE-2025-62157no fix yetHigh 8.1Nov 5, 2025Argo Workflow has a Zipslip Vulnerability in github.com/argoproj/argo-workflowsCVE-2025-62156no fix yetHigh 7.5Dec 2, 2024Argo Workflows Allows Access to Archived Workflows with Fake Token in `client`...CVE-2024-53862no fix yetMedium 5.7Oct 30, 2024argo-workflows: denial of serviceCVE-2024-47827no fix yetMedium 6.5Aug 21, 2024Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflowsCVE-2021-37914no fix yetUnscoredAug 21, 2024Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflowsGO-2022-0388no fix yet