Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
5.3

Argo Workflows could let attackers run unwanted actions

published 5 days ago
Summary

The Argo Workflows component in version 3.6.19‑r5 can be tricked into executing actions it should not. This could let a malicious user affect your automated processes. Update Argo Workflows to a newer release that includes the fix.

What to do
  • Update cleanstart argo-workflows to version 3.6.19-r5.
Affected software
Ecosystem VendorProductAffected versions
CleanStart cleanstart argo-workflows < 3.6.19-r5
Fix: upgrade to 3.6.19-r5
Original advisory text
Security fix for GHSA-mh29-5h37-fv8m applied in: argo-workflows 3.6.19-r5
Security vulnerability affects the argo-workflows package. This issue is resolved in later releases. See references for vulnerability details.
References
Fix within
Internet-facing 14 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker partial control (estimated)
Severity
5.3 Medium
Timeline
Published30 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-TI57219 · OSV
Track software like this
Free during beta