CVE-2022-41354: Linuxfoundation Argo-Cd

Medium severity, CVSS 4.3. EPSS: 0.6% chance of exploitation in the next 30 days.

An access control issue in Argo CD v2.4.12 and below allows unauthenticated attackers to enumerate existing applications.

Affected products

• Linuxfoundation Argo-Cd: from 0.5.0, before 2.4.28 (fixed in 2.4.28); from 2.5.0, before 2.5.16 (fixed in 2.5.16); from 2.6.0, before 2.6.7 (fixed in 2.6.7)

Published 2023-03-27. Last modified 2026-07-09.