CVE-2026-31892 Details
Description
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From 2.9.0 to before 4.0.2 and 3.7.11, A user who can submit Workflows can completely bypass all security settings defined in a WorkflowTemplate by including a podSpecPatch field in their Workflow submission. This works even when the controller is configured with templateReferencing: Strict, which is specifically documented as a mechanism to restrict users to admin-approved templates. The podSpecPatch field on a submitted Workflow takes precedence over the referenced WorkflowTemplate during spec merging and is applied directly to the pod spec at creation time with no security validation. This vulnerability is fixed in 4.0.2 and 3.7.11.
A vulnerability exists in Argo Workflows versions 2.9.0 prior to 4.0.2 and 3.7.11, allowing users to bypass security settings in WorkflowTemplates. By including a podSpecPatch field in Workflow submissions, users can override security configurations, even when the controller is set to templateReferencing: Strict. This mode is intended to limit users to admin-approved templates. The vulnerability arises because the podSpecPatch field takes precedence during specification merging and is applied to the pod specification at creation without any security validation. Exploitation could lead to unauthorized access to Kubernetes node resources, including full root access, by manipulating container security settings and accessing the host filesystem.
Users can update to Argo Workflows versions 4.0.2 or 3.7.11, where this vulnerability is patched. Alternatively, when using 'templateReferencing: Strict' or 'Secure', the Argo Workflows controller should reject Workflows that include a podSpecPatch field. Without the code fix, deploy an admission controller with policies that block dangerous pod settings on Argo Workflows-created pods.
Metrics
CVSS 4.0 Severity and Vector Strings:
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 11, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://access.redhat.com/errata/RHSA-2026:10184 | redhat-SADP | |
| https://access.redhat.com/security/cve/CVE-2026-31892 | redhat-SADP | |
| https://bugzilla.redhat.com/show_bug.cgi?id=2446551 | redhat-SADP | |
| https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-31892.json | redhat-SADP | |
| https://github.com/argoproj/argo-workflows/security/advisories/GHSA-3wf5-g532-rcrr | [email protected] | ExploitMitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-807 | Reliance on Untrusted Inputs in a Security Decision | redhat-SADP |
| CWE-863 | Incorrect Authorization | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| argoproj argo workflows | >= 2.9.0, < 3.7.11 >= 4.0.0, < 4.0.2 |
CPE
Remediation
| |
Change History
6 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jul 15, 2026 | CVE Modified | redhat-SADP |
| Jun 30, 2026 | CVE Modified | redhat-SADP |
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 17, 2026 | Initial Analysis | [email protected] |
| Mar 11, 2026 | New CVE Received | [email protected] |