Lucene search
+L

CVE-2025-32445

🗓️ 15 Apr 2025 19:22:36Reported by GitHub_MType 
cve
 cve
🔗 web.nvd.nist.gov📰️ 7 Media mentions👁 317 Views

CVE-2025-32445 allows users to gain privileged access via EventSource and Sensor custom resources.

Related
Detection
Affected
Refs
Social
Vulners
[
  {
    "vendor": "argoproj",
    "product": "argo-events",
    "versions": [
      {
        "version": "< 1.9.6",
        "status": "affected"
      }
    ]
  }
]

syedaquib77

Threat Alert: Critical Argo Events Vulnerability (CVE-2025-32445) Date: 2025-04-16 Timeline: Attribution: Reported by [/thevilledev on GitHub](https://t.co/moYvxgTg8E) Summary: A critical security vulnerability (CVE-2025-32445) with a CVSS score of 10 has been discovered in Argo Events, an event-driven workflow automation framework for Kubernetes. The vulnerability allows users with permissions to create or modify EventSource and Sensor custom resources to gain privileged access to the host system and cluster by manipulating container properties within the `spec.template` or `spec.template.container` sections. Successful exploitation can break tenant isolation, grant non-admin users host/cluster access, expose other tenants' data, bypass security models like RBAC and Pod Security Policies/Standards, and lead to complete host system compromise. A patch is available in version v1.9.6. Attack Details: - Attack Type: Vulnerability Exploitation - Target: Argo Events / Kubernetes Clusters Attack Vectors: - Manipulation of EventSource/Sensor Custom Resources (CVE-2025-32445 - T1071) Impact: Privilege escalation, Host/cluster compromise, Data exposure, Security control bypass (RBAC, Pod Security Policies/Standards), Broken tenant isolation Recommended Actions: Upgrade to Argo Events v1.9.6 or later to mitigate the vulnerability and protect against exploitation. Related Resources: - https://t.co/jHbZBtmtB9 - https://t.co/kRZpitz5uu - https://t.co/R8ubiO0asZ Tags: #CVE-2025-32445 #Argo_Events #Kubernetes #Vulnerability #Privilege_Escalation #CVSS_10 #Patch_Available #Cybersecurity

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

17 Jun 2026 09:12Current
9.4High risk
Vulners AI Score9.4
CVSS 3.19.9
EPSS0.00771
SSVC
317