A vulnerability categorized as critical has been discovered in argoproj argo-workflows up to 3.7.10/4.0.1. Affected by this issue is some unknown functionality. Executing a manipulation of the argument podSpecPatch can lead to incorrect authorization.
This vulnerability appears as CVE-2026-31892. The attack may be performed from remote. There is no available exploit.
It is advisable to upgrade the affected component.
