CVE-2022-1025: Argoproj Argo Cd

High severity, CVSS 8.8. EPSS: 1.3% chance of exploitation in the next 30 days.

All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level.

Affected products

• Argoproj Argo Cd: from 0.5.0, up to and including 2.1.12; from 2.2.0, up to and including 2.2.7; from 2.3.0, up to and including 2.3.1

Published 2022-07-12. Last modified 2026-06-17.