VDB

GO-2026-4681

GO-2026-4681 PUBLISHED

Argo Workflows: WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode in github.com/argoproj/argo-workflows

Affected Products

VendorProductVersions
chainguardkubeflow-pipelines0
github.comargoproj/argo-workflows0
wolfikubeflow-pipelines0
github.comargoproj/argo-workflows/v22.9.0
github.comargoproj/argo-workflows/v30
github.comargoproj/argo-workflows/v40

Timeline

  • Mar 12, 2026 CVE Published
  • Mar 23, 2026 CVE Updated
  • Oct 14, 2026 Security Advisory

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›