CVE-2026-54526

Improper access control in Argoproj Argo Workflows

CVSS score

9.9

EPSS probability

%0.6

Risk score

0.1

Published

3 mo ago

Overview Public Exploits (1)Newsroom Vulnerability Timeline

Public Exploits · GitHub and Metasploit Intelligence

This tab scans the sources that NVD labels as exploits, GitHub repositories matching the CVE identifier and Rapid7 Metasploit Framework modules. Only links to sources that were actually found are shown.

argoproj/argo-workflows/security/advisories/GHSA-48p8-g2fx-3wwm

GitHub

https://github.com/argoproj/argo-workflows/security/advisories/GHSA-48p8-g2fx-3wwm

Exploit reference

Similar Vulnerabilities

9.8

CVE-2026-60004 Actively exploited

Code injection in Gitea

VendorgiteaProductgitea+2 etkilenen

Patch verified Public Exploits:16EPSS %241 mo ago

9.9

CVE-2026-73802

Gitea Runner host isolation bypass through container options

VendorgiteaProductGitea Runner+2 etkilenen

Patch status unknown1 d ago

8.6

CVE-2026-76819

VendorgoProductgithub.com/projectdiscovery/nuclei/v3

Patch status unknown22 d ago

8.5

CVE-2026-59185

Identrail Cross-tenant IDOR: Client-supplied GitHub App installation_id is bound to the caller's workspace without ownership verification

VendorgoProductgithub.com/identrail/identrail

Patch verified1 mo ago

7.8

CVE-2026-59172

Joker linter executed project-local .jokerd/linter.* files during linting

VendorgoProductgithub.com/candid82/joker

Patch verified1 mo ago

7.5

CVE-2025-59538

Vulnerability in Argoproj Argo Cd

VendorargoprojProductargo cd

Patch verified Public Exploits:1EPSS %91 y ago

Get this vulnerability through the API

Affected products, version ranges, exploitation status and patch information in a single request, with a free key.

Get a free key Documentation

curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.daybreach.dev/api/v1/intel/cves/CVE-2026-54526"