Vulnerabilities in akuity
6 resultsCVE-2026-27112CRITICALKargo has an Authorization Bypass Vulnerability in Batch Resource Creation API EndpointsEPSS 0.5%CVE-2026-24748MEDIUMKargo's `GetConfig()` and `RefreshResource()` API endpoints allow unauthenticated accessEPSS 0.4%CVE-2026-61850CRITICALKargo: Privilege escalation via Project RBAC management in the Kargo APIEPSS 0.4%CVE-2026-32828MEDIUMKargo: SSRF in Promotion http/http-download Steps Enables Internal Network Access and Data ExfiltrationEPSS 0.3%CVE-2026-42350MEDIUMKargo: Open Redirect in UI OIDC Login Flow via redirectTo Query ParameterEPSS 0.3%CVE-2026-27111MEDIUMKargo has Missing Authorization Vulnerabilities in Approval & Promotion REST API EndpointsEPSS 0.2%