{ "document": { "aggregate_severity": { "namespace": "https://access.redhat.com/security/updates/classification/", "text": "Important" }, "category": "csaf_vex", "csaf_version": "2.0", "distribution": { "text": "Copyright © Red Hat, Inc. All rights reserved.", "tlp": { "label": "WHITE", "url": "https://www.first.org/tlp/" } }, "lang": "en", "notes": [ { "category": "legal_disclaimer", "text": "This content is licensed under the Creative Commons Attribution 4.0 International License (https://creativecommons.org/licenses/by/4.0/). If you distribute this content, or a modified version of it, you must provide attribution to Red Hat Inc. and provide a link to the original.", "title": "Terms of Use" } ], "publisher": { "category": "vendor", "contact_details": "https://access.redhat.com/security/team/contact/", "issuing_authority": "Red Hat Product Security is responsible for vulnerability handling across all Red Hat products and services.", "name": "Red Hat Product Security", "namespace": "https://www.redhat.com" }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-42296.json" } ], "title": "Argo Workflows: github.com/argoproj/argo-workflows: Argo Workflows: Privilege escalation via security control bypass", "tracking": { "current_release_date": "2026-06-30T03:57:30+00:00", "generator": { "date": "2026-06-30T03:57:30+00:00", "engine": { "name": "Red Hat SDEngine", "version": "5.3.0" } }, "id": "CVE-2026-42296", "initial_release_date": "2026-05-09T03:52:03.456000+00:00", "revision_history": [ { "date": "2026-05-09T03:52:03.456000+00:00", "number": "1", "summary": "Initial version" }, { "date": "2026-06-25T10:43:40+00:00", "number": "2", "summary": "Current version" }, { "date": "2026-06-30T03:57:30+00:00", "number": "3", "summary": "Last generated version" } ], "status": "final", "version": "3" } }, "product_tree": { "branches": [ { "branches": [ { "branches": [ { "category": "product_name", "name": "Red Hat OpenShift AI (RHOAI)", "product": { "name": "Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai)", "product_identification_helper": { "cpe": "cpe:/a:redhat:openshift_ai" } } } ], "category": "product_family", "name": "Red Hat OpenShift AI (RHOAI)" }, { "category": "product_version", "name": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9", "product": { "name": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9", "product_id": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9", "product_identification_helper": { "purl": "pkg:oci/odh-data-science-pipelines-argo-argoexec-rhel9?repository_url=registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9" } } }, { "category": "product_version", "name": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9", "product": { "name": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9", "product_id": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9", "product_identification_helper": { "purl": "pkg:oci/odh-data-science-pipelines-argo-workflowcontroller-rhel9?repository_url=registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9" } } }, { "category": "product_version", "name": "rhoai/odh-ml-pipelines-api-server-v2-rhel9", "product": { "name": "rhoai/odh-ml-pipelines-api-server-v2-rhel9", "product_id": "rhoai/odh-ml-pipelines-api-server-v2-rhel9", "product_identification_helper": { "purl": "pkg:oci/odh-ml-pipelines-api-server-v2-rhel9?repository_url=registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9" } } }, { "category": "product_version", "name": "rhoai/odh-ml-pipelines-driver-rhel9", "product": { "name": "rhoai/odh-ml-pipelines-driver-rhel9", "product_id": "rhoai/odh-ml-pipelines-driver-rhel9", "product_identification_helper": { "purl": "pkg:oci/odh-ml-pipelines-driver-rhel9?repository_url=registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9" } } }, { "category": "product_version", "name": "rhoai/odh-ml-pipelines-launcher-rhel9", "product": { "name": "rhoai/odh-ml-pipelines-launcher-rhel9", "product_id": "rhoai/odh-ml-pipelines-launcher-rhel9", "product_identification_helper": { "purl": "pkg:oci/odh-ml-pipelines-launcher-rhel9?repository_url=registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9" } } }, { "category": "product_version", "name": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "product": { "name": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "product_id": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "product_identification_helper": { "purl": "pkg:oci/odh-ml-pipelines-persistenceagent-v2-rhel9?repository_url=registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9" } } }, { "category": "product_version", "name": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9", "product": { "name": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9", "product_id": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9", "product_identification_helper": { "purl": "pkg:oci/odh-ml-pipelines-scheduledworkflow-v2-rhel9?repository_url=registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9" } } } ], "category": "vendor", "name": "Red Hat" } ], "relationships": [ { "category": "default_component_of", "full_product_name": { "name": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 as a component of Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-argoexec-rhel9" }, "product_reference": "rhoai/odh-data-science-pipelines-argo-argoexec-rhel9", "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)" }, { "category": "default_component_of", "full_product_name": { "name": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9 as a component of Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9" }, "product_reference": "rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9", "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)" }, { "category": "default_component_of", "full_product_name": { "name": "rhoai/odh-ml-pipelines-api-server-v2-rhel9 as a component of Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-api-server-v2-rhel9" }, "product_reference": "rhoai/odh-ml-pipelines-api-server-v2-rhel9", "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)" }, { "category": "default_component_of", "full_product_name": { "name": "rhoai/odh-ml-pipelines-driver-rhel9 as a component of Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-driver-rhel9" }, "product_reference": "rhoai/odh-ml-pipelines-driver-rhel9", "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)" }, { "category": "default_component_of", "full_product_name": { "name": "rhoai/odh-ml-pipelines-launcher-rhel9 as a component of Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-launcher-rhel9" }, "product_reference": "rhoai/odh-ml-pipelines-launcher-rhel9", "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)" }, { "category": "default_component_of", "full_product_name": { "name": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9 as a component of Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9" }, "product_reference": "rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)" }, { "category": "default_component_of", "full_product_name": { "name": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9 as a component of Red Hat OpenShift AI (RHOAI)", "product_id": "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9" }, "product_reference": "rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9", "relates_to_product_reference": "red_hat_openshift_ai_(rhoai)" } ] }, "vulnerabilities": [ { "cve": "CVE-2026-42296", "cwe": { "id": "CWE-863", "name": "Incorrect Authorization" }, "discovery_date": "2026-05-09T05:01:27.119593+00:00", "ids": [ { "system_name": "Red Hat Bugzilla ID", "text": "2468446" } ], "notes": [ { "category": "description", "text": "A flaw was found in Argo Workflows. A user with create Workflow permission can bypass the `templateReferencing: Strict` security control. This bypass allows the user to gain host network access, switch service accounts, override pod security context, add tolerations to schedule on control-plane nodes, or enable Service Account (SA) token mounting. This could lead to privilege escalation and unauthorized access within the Kubernetes cluster.", "title": "Vulnerability description" }, { "category": "summary", "text": "Argo Workflows: github.com/argoproj/argo-workflows: Argo Workflows: Privilege escalation via security control bypass", "title": "Vulnerability summary" }, { "category": "other", "text": "Severity: Important\n\nThis issue is classified as Important because a user with create Workflow permission can bypass Argo Workflows templateReferencing Strict or Secure controls and influence pod security posture (hostNetwork, serviceAccountName, securityContext, tolerations, automountServiceAccountToken) when submitting workflows that reference WorkflowTemplates. RH CVSS 8.1 reflects network reachability, low-privilege attacker (workflow submitter), and high confidentiality/integrity impact in the cluster context (PR:L, UI:N).\n\nRed Hat OpenShift AI ships Argo Workflows as part of Data Science Pipelines (workflow-controller and argoexec containers, plus related ml-pipelines components) on supported streams rhoai-2.25, rhoai-3.3, and rhoai-3.4. Bundled versions are below the upstream fix (3.7.14). Practical exploitability also depends on Kubernetes-level controls (PodSecurity admission, OPA/Gatekeeper) and namespace RBAC for workflow creation.\n\nThis CVE is an incomplete fix for CVE-2026-31892; clusters that received the earlier 3.7.11-class update remain affected until upgraded to 3.7.14 or later on the 3.x line.", "title": "Statement" }, { "category": "general", "text": "The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.", "title": "CVSS score applicability" } ], "product_status": { "known_affected": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-argoexec-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-api-server-v2-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-driver-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-launcher-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9" ] }, "references": [ { "category": "self", "summary": "Canonical URL", "url": "https://access.redhat.com/security/cve/CVE-2026-42296" }, { "category": "external", "summary": "RHBZ#2468446", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2468446" }, { "category": "external", "summary": "https://www.cve.org/CVERecord?id=CVE-2026-42296", "url": "https://www.cve.org/CVERecord?id=CVE-2026-42296" }, { "category": "external", "summary": "https://nvd.nist.gov/vuln/detail/CVE-2026-42296", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-42296" }, { "category": "external", "summary": "https://github.com/argoproj/argo-workflows/commit/534f4ff1cbd86908e8ff76d97d553ad5a49a950d", "url": "https://github.com/argoproj/argo-workflows/commit/534f4ff1cbd86908e8ff76d97d553ad5a49a950d" }, { "category": "external", "summary": "https://github.com/argoproj/argo-workflows/releases/tag/v3.7.14", "url": "https://github.com/argoproj/argo-workflows/releases/tag/v3.7.14" }, { "category": "external", "summary": "https://github.com/argoproj/argo-workflows/releases/tag/v4.0.5", "url": "https://github.com/argoproj/argo-workflows/releases/tag/v4.0.5" }, { "category": "external", "summary": "https://github.com/argoproj/argo-workflows/security/advisories/GHSA-3775-99mw-8rp4", "url": "https://github.com/argoproj/argo-workflows/security/advisories/GHSA-3775-99mw-8rp4" } ], "release_date": "2026-05-09T03:52:03.456000+00:00", "remediations": [ { "category": "workaround", "details": "Upgrade Argo Workflows to version 3.7.14 or later (3.x line) or 4.0.5+ (4.x line) in affected Red Hat OpenShift AI releases. Red Hat OpenShift AI engineering is expected to deliver updated Data Science Pipelines builds for affected streams (rhoai-2.25, rhoai-3.3, rhoai-3.4).\n\nAs a defense-in-depth measure, enforce PodSecurity admission or policy controls to block hostNetwork, privileged pods, and unauthorized service account use independently of Argo templateReferencing settings. Restrict Workflow create permissions to trusted principals.", "product_ids": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-argoexec-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-api-server-v2-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-driver-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-launcher-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9" ] }, { "category": "none_available", "details": "Affected", "product_ids": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-argoexec-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-api-server-v2-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-driver-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-launcher-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9" ] } ], "scores": [ { "cvss_v3": { "attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.1, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N", "version": "3.1" }, "products": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-argoexec-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-api-server-v2-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-driver-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-launcher-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9" ] } ], "threats": [ { "category": "impact", "details": "Important", "product_ids": [ "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-argoexec-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-api-server-v2-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-driver-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-launcher-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9", "red_hat_openshift_ai_(rhoai):rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9" ] } ], "title": "Argo Workflows: github.com/argoproj/argo-workflows: Argo Workflows: Privilege escalation via security control bypass" } ] }