CVE-2026-82277

A missing-authentication flaw CWE-306 was found in the Argo Rollouts dashboard. The dashboard binds to all network interfaces 0.0.0.0 and exposes mutating Rollout operations — including PromoteRollout, AbortRollout, RestartRollout, SetRolloutImage, UndoRollout, and RetryRollout — without any...