CVE-2020-8826: Argoproj Argo Cd

High severity, CVSS 7.5. EPSS: 1.7% chance of exploitation in the next 30 days.

As of v1.5.0, the Argo web interface authentication system issued immutable tokens. Authentication tokens, once issued, were usable forever without expiration—there was no refresh or forced re-authentication.

Affected products

• Argoproj Argo Cd: up to and including 1.5.0

Published 2020-04-08. Last modified 2026-06-17.