Read the docs
TI-2026-30605 Aliases CVE-2026-42296GHSA-3775-99mw-8rp4

Incorrect authorization in argoproj argo-workflows

Priority HIGH 70CWE-863Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Security bypass
Confidentiality · integrity · availability
High · High · None
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-863.

Summary

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to versions 3.7.14 and 4.0.5, a user with create Workflow permission can bypass templateReferencing: Strict to get host network access, switch service accounts, override pod security context, add tolerations to schedule on control-plane nodes, or enable SA token mounting. This defeats the stated purpose of the feature. The practical impact depends on what Kubernetes-level controls are in place. Clusters with PodSecurity admission or OPA/Gatekeeper would independently block some of these (like hostNetwork). Clusters that rely on Argo's Strict mode as the primary enforcement layer are fully exposed. This issue has been patched in versions 3.7.14 and 4.0.5.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00424 36th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed argo-workflows (argoproj): 3.7.14, 4.0.5github.com/argoproj/argo-workflows/v3 (Go): 3.7.14+1 more productRed Hat: 1 advisory

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
argoprojargo-workflowsbefore 3.7.14; 4.0.0 to before 4.0.53.7.14, 4.0.5Patch availableCNA
—github.com/argoproj/argo-workflows/v3 (Go)before 3.7.143.7.14Patch availableGHSA-3775-99mw-8rp4
—github.com/argoproj/argo-workflows/v4 (Go)4.0.0 to before 4.0.54.0.5Patch availableGHSA-3775-99mw-8rp4
  • argo-workflows Vendorargoproj Affected before 3.7.14; 4.0.0 to before 4.0.5 Fixed in 3.7.14, 4.0.5 Patch available CNA
  • github.com/argoproj/argo-workflows/v3 (Go) Vendor— Affected before 3.7.14 Fixed in 3.7.14 Patch available GHSA-3775-99mw-8rp4
  • github.com/argoproj/argo-workflows/v4 (Go) Vendor— Affected 4.0.0 to before 4.0.5 Fixed in 4.0.5 Patch available GHSA-3775-99mw-8rp4

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:argoproj:argo_workflows:*:*:*:*:*:go:*:*before 3.7.14; 4.0.0 to before 4.0.5Vulnerableargoproj
  • cpe:2.3:a:argoproj:argo_workflows:*:*:*:*:*:go:*:* Versions before 3.7.14; 4.0.0 to before 4.0.5 Vulnerable ·argoproj

Remediation

  • Fix · CNA argo-workflows (argoproj) Fixed in 3.7.14, 4.0.5
  • Fix · GHSA-3775-99mw-8rp4 github.com/argoproj/argo-workflows/v3 (Go) Fixed in 3.7.14 Advisory →
  • Fix · GHSA-3775-99mw-8rp4 github.com/argoproj/argo-workflows/v4 (Go) Fixed in 4.0.5 Advisory →

Red Hat 1 advisory

  • RHSA-2026:73987 Released 2026-09-30 · Red Hat rating Critical
    RHOAI 3.3.7 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +47

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift AI 3.3Fixed RHSA-2026:73987
Not affected: 1 product
  • Red Hat OpenShift AI 3.3

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-42296
  2. 2026-10-03 Alias added: GHSA-3775-99mw-8rp4
  3. 2026-10-07 Fix available: RHSA-2026:73987 · Red Hat

References

Exploit 1

Patch 1

Advisory 1

Other 5

  • TI-2026-22564 Argo Workflows has unauthorized access to Argo Workflows Template CVSS 3.1CRITICAL 9.8
  • TI-2026-30603 Argo Workflows: Unauthenticated Memory Exhaustion (DoS) in Webhook Interceptor CVSS 4.0HIGH 8.2
  • TI-2026-39371 Argo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencing CVSS 4.0HIGH 8.9
  • TI-2026-24444 WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode CVSS 4.0HIGH 8.9
  • TI-2026-30604 Argo Workflows: Exposure of artifact repository credentials CVSS 4.0HIGH 8.5
  • TI-2025-38478 argo-workflows Zip Slip path traversal allows arbitrary file write and container configuration overwrite CVSS 3.1HIGH 8.8
See all 16 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences