https://vulnerability.circl.lu/rss/recent/all/10 Most recent entries from all 2026-09-29T01:37:12.798336+00:00 Vulnerability-Lookup info@circl.lu python-feedgen Contains only the most 10 recent entries. https://vulnerability.circl.lu/vuln/cve-2026-82277 CVE-2026-82277 — Argo Rollouts Dashboard Unauthenticated Mutating Operations 2026-09-29T01:37:12.800086+00:00

Affected: argoproj argo-rollouts

Argo Rollouts dashboard through 1.10.0 binds to all interfaces and exposes mutating Rollout operations without authentication, authorization, or CSRF protection. Attackers on the same network can invoke PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout operations across all namespaces accessible to the operator's kubeconfig.