Description
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to 3.7.15 and 4.0.6, the allow-list fix for CVE-2026-31892 is incomplete because workflow/util/merge.go ValidateUserOverrides and SanitizeUserWorkflowSpec walk only the top-level fields of WorkflowSpec via reflection, and WorkflowSpec.ArtifactGC is allow-listed wholesale; the struct behind that field, WorkflowLevelArtifactGC, has a PodSpecPatch sub-field whose contents flow unmodified into util.ApplyPodSpecPatch on the artifact-GC pod, the same sink the original fix closed for WorkflowSpec.PodSpecPatch, so a user submitting a Workflow under templateReferencing: Strict or Secure (against a referenced WorkflowTemplate that declares an output artifact and setting spec.artifactGC.strategy: OnWorkflowCompletion) can still inject an arbitrary strategic merge patch into the artifact-GC pod, including hostPath volumes, privileged: true, arbitrary image and command, and hostNetwork: true, defeating the stated purpose of Strict/Secure reference mode. This issue is fixed in versions 3.7.15 and 4.0.6.
Published: 2026-07-16
Score: 8.9 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

Argo Workflows is a container-native workflow engine that allows users to define and execute parallel jobs on Kubernetes. This vulnerability is an incomplete fix for a prior flaw that lets an authenticated user submit a Workflow that bypasses the Strict or Secure templateReferencing mode. By inserting a strategic merge patch into the ArtifactGC pod specification, the user can add hostPath volumes, set privileged to true, use an arbitrary image and command, and enable hostNetwork. This can give the attacker the ability to run arbitrary code with elevated privileges on the node hosting the GC pod, effectively escalating privileges or compromising the cluster.

Affected Systems

Argo Workflows (argoproj:argo-workflows) – any 3.x release prior to 3.7.15 and any 4.x release prior to 4.0.6 contains the flaw.

Risk and Exploitability

The CVSS score is 8.9, indicating high severity, while the EPSS score is less than 1% and the issue is not listed in the CISA KEV catalog. It is inferred from the description that the attack requires authenticated cluster access, as the attacker must create or modify WorkflowTemplates that set artifactGC.strategy: OnWorkflowCompletion. This provides a path to execute privileged code on the node, and once the merge patch is applied, the impact is significant.

Generated by OpenCVE AI on July 31, 2026 at 01:27 UTC.

Remediation

No vendor fix or workaround currently provided.

OpenCVE Recommended Actions

  • Upgrade to Argo Workflows version 3.7.15 or newer, or 4.0.6 or newer, which adds full validation of WorkflowSpec fields and blocks unsafe PodSpecPatch injection.
  • If an upgrade cannot be performed immediately, remove or disable artifactGC.strategy: OnWorkflowCompletion from your WorkflowTemplates or disable ArtifactGC entirely to prevent the vulnerable pod from being created.
  • Apply stricter RBAC so that only trusted users or service accounts can create or modify WorkflowTemplates that enable ArtifactGC.strategy, reducing the attack surface for privileged code execution.

Generated by OpenCVE AI on July 31, 2026 at 01:27 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Fri, 17 Jul 2026 14:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'poc', 'Technical Impact': 'total'}, 'version': '2.0.3'}

Thu, 16 Jul 2026 20:45:00 +0000

Type Values Removed Values Added
First Time appeared Argoproj
Argoproj argo-workflows
Vendors & Products Argoproj
Argoproj argo-workflows

Thu, 16 Jul 2026 19:15:00 +0000

Type Values Removed Values Added
Description Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to 3.7.15 and 4.0.6, the allow-list fix for CVE-2026-31892 is incomplete because workflow/util/merge.go ValidateUserOverrides and SanitizeUserWorkflowSpec walk only the top-level fields of WorkflowSpec via reflection, and WorkflowSpec.ArtifactGC is allow-listed wholesale; the struct behind that field, WorkflowLevelArtifactGC, has a PodSpecPatch sub-field whose contents flow unmodified into util.ApplyPodSpecPatch on the artifact-GC pod, the same sink the original fix closed for WorkflowSpec.PodSpecPatch, so a user submitting a Workflow under templateReferencing: Strict or Secure (against a referenced WorkflowTemplate that declares an output artifact and setting spec.artifactGC.strategy: OnWorkflowCompletion) can still inject an arbitrary strategic merge patch into the artifact-GC pod, including hostPath volumes, privileged: true, arbitrary image and command, and hostNetwork: true, defeating the stated purpose of Strict/Secure reference mode. This issue is fixed in versions 3.7.15 and 4.0.6.
Title Argo Workflows: Incomplete fix for CVE-2026-31892: ArtifactGC.PodSpecPatch bypass of Strict/Secure templateReferencing
Weaknesses CWE-284
References
Metrics cvssV4_0

{'score': 8.9, 'vector': 'CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:N/SC:H/SI:H/SA:H'}

Subscriptions

Argoproj Argo-workflows
cve-icon MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published:

Updated: 2026-07-17T13:57:43.413Z

Reserved: 2026-06-15T18:40:01.651Z

Link: CVE-2026-54526

cve-icon Vulnrichment

Updated: 2026-07-17T13:49:14.409Z

cve-icon NVD

No data.

cve-icon Redhat

No data.

cve-icon OpenCVE Enrichment

Updated: 2026-07-31T01:30:05Z

Weaknesses