What is CVE-2024-52799?

CVE-2024-52799 is a high-severity vulnerability in Argoproj Argo-helm, classified under CWE-250. CVSS score: 8.2/10. Published 2024-11-21.

How severe is CVE-2024-52799?

High severity. CVSS v3 base score is 8.2 out of 10.

Vulnerability in Argoproj Argo-helm

CVE-2024-52799

Argo Workflows Chart is used to set up argo and its needed dependencies through one command. Prior to 0.44.0, the workflow-role has excessive privileges, the worst being create pods/exec, which will allow kubectl exec into any Pod in the s…

EPSS: 0.002 (11.5th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 8.2 (High). Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H.

Affected products

Argoproj Argo-helm — versions < 0.44.0

Weakness classification (CWE)

CWE-250
CWE-1220

References

security-advisories@github.com (x_refsource_CONFIRM)
security-advisories@github.com (x_refsource_MISC)

Frequently asked questions

What is CVE-2024-52799?: CVE-2024-52799 is a high-severity vulnerability in Argoproj Argo-helm, classified under CWE-250. CVSS score: 8.2/10. Published 2024-11-21.
How severe is CVE-2024-52799?: High severity. CVSS v3 base score is 8.2 out of 10.