Beveiligingsadvies

CVE-2026-82277

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-28 16:18:58

Laatst bijgewerkt 2026-08-31 18:54:54

Toegewezen door VulnCheck

CVSS-score 9.8

Status PUBLISHED

Beschrijving

Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout operations across all namespaces accessible to the operator's kubeconfig.

← Alle CVE's bekijken Bekijk op cve.org ↗