Argo CD is a declarative GitOps continuous delivery platform for Kubernetes. Before the releases 3.2.12, 3.3.10, and 3.4.2, users with application write access could add link.argocd.argoproj.io/* annotations that contain pipe‑separated values. Those values are rendered by ui/src/app/applications/components/application-summary/application-summary.tsx in the Summary tab URL section as anchor href attributes without validation of the scheme. By inserting a javascript: URL into such an annotation, an attacker can trigger the browser to execute arbitrary JavaScript in the context of a higher‑privileged authenticated Argo CD session, effectively enabling a developer to elevate privileges to an administrator.

The flaw affects Argo CD deployments running any version earlier than 3.2.12, 3.3.10, or 3.4.2. Users with the ability to add or modify application annotations are at risk. The vendor, argoproj, fixes the issue in the mentioned releases.

The CVSS score of 7.3 reflects a moderate‑to‑high severity, but the EPSS score of less than 1% indicates a low current exploitation likelihood. The vulnerability is not listed in the CISA KEV catalog. Attackers need authenticated developer access to inject the malicious annotation, making the attack vector internal, but the impact is the elevation of privileges to an administrator. Because the flaw is stored, it persists until the data is sanitized or the software is upgraded.