VulnSocial

CVE-2026-42183Disclosure(argoproj / argo_workflows)

LOWCVSS 6.5 · MEDIUM

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, a nil pointer dereference in server/auth/gatekeeper.go rbacAuthorization() causes a panic (denial of service) for SSO users whose claims match a namespace-level RBAC rule but not an SSO-namespace rule, when SSO_DELEGATE_RBAC_TO_NAMESPACE=true. This issue has been patched in version 4.0.5.

argoproj CVEsBack to dashboard
0.0/ 10 priority

Sources & remediation

Patch / fix
Exploit / PoC references
Other references
Weakness type (CWE)
CWE-476

Priority

LOW

Exploitation

NONE

PoC

YES

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • argo_workflows

Threat summary

  • 3 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 2 signals
  • Disclosure: 2 classified signals
  • General: 1 classified signal
  • Peaked 1d ago at 2 mentions (2026-05-09); latest day: 1
  • 3 total mentions across 2 days

Affected systems

Vendors
argoproj
Products
argo_workflows

Deep dive

Activity timeline3 mentions / 2d
01122Mentions · 2026-05-09: 2Mentions · 2026-05-11: 1Technical Details · 2026-05-09: 205-0905-11
Signal classification2 categories
Disclosure
266.7%
General
133.3%
Referenced assets3 URLs
Classification over time
DateTotalLabels
2026-05-092
Disclosure2
2026-05-111
General1
Full discourse3 posts
  • CVEarity@CVEarity
    General

    ⚡ New CVE Alert: CVE-2026-42183 📊 Severity: 2.3 🚨 Risk Level: Low 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-42183 #CVE-2026-42183 #CVE #Low #CyberSecurity #InfoSec https://t.co/sFJcHntyZV

    Post summary

    The tweet merely announces a low‑severity CVE with a link to the NVD page, offering no additional technical, exploit, or patch information.

    0000035
    157 followersView on X
  • CVE@CVEnew
    Disclosure

    CVE-2026-42183 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, a nil poi… https://www.cve.org/CVERecord?id=CVE-2026-42183

    Post summary

    A brief notice referencing CVE‑2026‑42183 for Argo Workflows, indicating a null‑pointer issue in versions 4.0.0‑before 4.0.5, but lacking deeper analysis or exploit details.

    0000060
    57.5K followersView on X
  • Vulmon Vulnerability Feed@VulmonFeeds
    Disclosure

    CVE-2026-42183 Denial of Service via Nil Pointer Dereference in Argo Workflows 4.0.0-4.0.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42183

    Post summary

    The post discloses CVE-2026‑42183, a denial‑of‑service flaw stemming from a nil‑pointer dereference in Argo Workflows 4.0.0‑4.0.4, without providing a PoC, exploit, patch, or evidence of active exploitation.

    0000037
    4.0K followersView on X
CPE platform detail1 entries

1 of 1 entries

PartVendorProductVersionTarget SWTarget HW
Appargoprojargo_workflows-go-

Explore more

Back to dashboardargoproj CVEsargo_workflows vulnerabilities