Aller au contenu
en Se connecter
9.8 Critique

CVE-2026-28229 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes

Description

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. Prior to 4.0.2 and 3.7.11, Workflow templates endpoints allow any client to retrieve WorkflowTemplates (and ClusterWorkflowTemplates). Any request with a Authorization: Bearer nothing token can leak sensitive template content, including embedded Secret manifests. This vulnerability is fixed in 4.0.2 and 3.7.11.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat OpenShift AI 2.25 1776740366 premières → < 1776740366 1776740366
Red Hat OpenShift AI (RHOAI) Versions non publiées
argo-workflows 4.0 4.0.0 → < 4.0.2 4.0.2
argo-workflows 3.7 premières → < 3.7.11 3.7.11

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat OpenShift AI 2.25

Les 140 CVE de Red Hat OpenShift AI 2.25 →
CVE-2026-86332 A flaw was found in odh-dashboard in Red Hat OpenShift AI 6.5 Moyenne CVE-2026-18620 A flaw was found in Data Science Pipelines 7.1 Élevée CVE-2026-18618 A flaw was found in ml-metadata 7.5 Élevée CVE-2026-18611 A flaw was found in the Data Science Pipelines Operator 7.5 Élevée
Suivre cette CVE