CVE-2026-42350: medium-severity vulnerability in akuity kargo
Kargo: Open Redirect in UI OIDC Login Flow via redirectTo Query Parameter
Published · Updated
E-mail alert when it lands in KEV, gets a public PoC or its score goes up.
13Vexday Risk Score
No sign of exploitation. No public exploitation artifact known so far.
ssvc Trackcvss 5.1epss 0.3%
Kargo manages and automates the promotion of software artifacts. Prior to versions 1.7.10, 1.8.13, 1.9.8, and 1.10.2, Kargo is vulnerable to open redirect in UI OIDC login flow via the redirectTo query parameter. This issue has been patched in versions 1.7.10, 1.8.13, 1.9.8, and 1.10.2.
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:N/SA:N
Affected products
akuity · kargoRelated CVEs — akuity kargo
In the same product, most dangerous first.
CVE-2026-27112CRITICALKargo has an Authorization Bypass Vulnerability in Batch Resource Creation API EndpointsEPSS 0.5%CVE-2026-24748MEDIUMKargo's `GetConfig()` and `RefreshResource()` API endpoints allow unauthenticated accessEPSS 0.4%CVE-2026-61850CRITICALKargo: Privilege escalation via Project RBAC management in the Kargo APIEPSS 0.4%CVE-2026-32828MEDIUMKargo: SSRF in Promotion http/http-download Steps Enables Internal Network Access and Data ExfiltrationEPSS 0.3%CVE-2026-27111MEDIUMKargo has Missing Authorization Vulnerabilities in Approval & Promotion REST API EndpointsEPSS 0.2%