CVE-2022-1025

PoC —

CVSS 3.1

8.8 high

EPSS

1%p69

Published

Jul 12, 2022 (Jul 12, 2022)

Modified

Jun 17, 2026

Description

All unpatched versions of Argo CD starting with v1.0.0 are vulnerable to an improper access control bug, allowing a malicious user to potentially escalate their privileges to admin-level.

Vendors: argoproj
Products: argo cd
Weakness: CWE-284
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.