Affected by GO-2022-0388
and 10 other vulnerabilities
GO-2022-0388: Argo Server TLS requests could be forged by attacker with network access in github.com/argoproj/argo-workflows
GO-2022-0405: Potential privilege escalation on Kubernetes >= v1.19 when the Argo Sever is run with `--auth-mode=client` in github.com/argoproj/argo-workflows
GO-2022-0928: Workflow re-write vulnerability using input parameter in github.com/argoproj/argo-workflows
GO-2024-3226: Argo Workflows Controller: Denial of Service via malicious daemon Workflows in github.com/argoproj/argo-workflows
GO-2024-3303: Argo Workflows Allows Access to Archived Workflows with Fake Token in `client` mode in github.com/argoproj/argo-workflows
GO-2025-4023: Argo Workflow has a Zipslip Vulnerability in github.com/argoproj/argo-workflows
GO-2025-4024: Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows
GO-2025-4223: RCE via ZipSlip and symbolic links in argoproj/argo-workflows in github.com/argoproj/argo-workflows
GO-2026-4350: Argo Workflows affected by stored XSS in the artifact directory listing in github.com/argoproj/argo-workflows
GO-2026-4678: Unauthorized access to Argo Workflows Template in github.com/argoproj/argo-workflows
GO-2026-4681: Argo Workflows: WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode in github.com/argoproj/argo-workflows
Argo is an open source container-native workflow engine for developing and running applications on Kubernetes.
Define workflows where each step in the workflow is a container.
Run rich CI/CD pipelines using Docker-in-Docker, complex testing with built in artifact management, secret management and lifecycle management of dev/test resources.
Run compute intensive jobs like data processing workflows or machine learning workflows in a fraction of the time using parallelize workflows.
Why Argo?
Argo is designed from the ground up for containers without the baggage and limitations of legacy VM and server-based environments.
Argo is cloud agnostic and can run on any kubernetes cluster. Today we support Kubernetes on Minikube, AWS and GKE.
Argo with Kubernetes puts a cloud-scale supercomputer at your fingertips.
With Argo, you don’t need to install or learn other tools such as Jenkins, Chef, Cloud Formation...
Argo 2.0 Alpha
Argo 2.0 is a Kubernetes Custom Resource Definition (CRD) which can run workflows using kubectl commands. Argo 2.0 is coming in December 2017.