CVE-2026-31892 WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode
| Reporter | Title | Published | Views | Family All 37 |
|---|---|---|---|---|
 | CVE-2026-31892 | 11 Mar 202615:41 | – | attackerkb |
 | CVE-2026-31892 vulnerabilities | 13 Mar 202601:17 | – | cgr |
 | CVE-2026-31892 | 11 Mar 202610:08 | – | circl |
 | Argo Workflows 安全漏洞 | 11 Mar 202600:00 | – | cnnvd |
 | CVE-2026-31892 | 11 Mar 202615:41 | – | cve |
| CVE-2026-54526 | 16 Jul 202619:07 | – | cve |
 | EUVD-2026-11206 | 11 Mar 202619:29 | – | euvd |
 | Argo has incomplete fix for CVE-2026-31892: hostNetwork, securityContext, serviceAccountName bypass templateReferencing Strict/Secure | 4 May 202620:11 | – | github |
| Argo Workflows: WorkflowTemplate Security Bypass via podSpecPatch in Strict/Secure Reference Mode | 11 Mar 202619:29 | – | github |
| Argo Workflows: ArtifactGC.PodSpecPatch bypasses Strict/Secure template reference allow-list (Incomplete fix for CVE-2026-31892) | 13 Aug 202614:16 | – | github |
10
[
{
"vendor": "argoproj",
"product": "argo-workflows",
"versions": [
{
"version": ">= 4.0.0, < 4.0.2",
"status": "affected"
},
{
"version": ">= 2.9.0, < 3.7.11",
"status": "affected"
}
]
}
]Data
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
11 Mar 2026 15:41Current
CVSS 48.9
EPSS0.00413