PT-2026-37171 · Unknown · Argo Workflows

Wernerina · Published 2026-05-04 · Updated 2026-05-12 · CVE-2026-42183

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Argo Workflows versions 4.0.0 through 4.0.4

Description A nil pointer dereference in the rbacAuthorization() function within server/auth/gatekeeper.go can lead to a denial of service for SSO users. This occurs when SSO DELEGATE RBAC TO NAMESPACE is set to true and a user's claims match a namespace-level RBAC rule but not an SSO-namespace rule. Specifically, when the getServiceAccount(claims, ssoNamespace) function returns nil, the loginAccount variable remains nil; if a matching namespaceAccount is found, the precedence() function is called with the nil loginAccount, causing a panic when attempting to access serviceAccount.Annotations.

Recommendations Update Argo Workflows to version 4.0.5.

Fix

DoS

NULL Pointer Dereference

Weakness Enumeration

CWE-476

Related Identifiers

BIT-ARGO-WORKFLOWS-2026-42183

CVE-2026-42183

GHSA-P4GQ-3VXJ-F4JQ

Affected Products

Argo Workflows

References · 11

• https://github.com/argoproj/argo-workflows/commit/c4cc17d0c034fa9a9cc01ef1af6c8016c93071d4 · Patch
• https://github.com/argoproj/argo-workflows/security/advisories/GHSA-p4gq-3vxj-f4jq · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2026-42183 · Security Note
• https://osv.dev/vulnerability/GHSA-p4gq-3vxj-f4jq · Vendor Advisory
• https://osv.dev/vulnerability/BIT-argo-workflows-2026-42183 · Vendor Advisory
• https://github.com/argoproj/argo-workflows · Note
• https://github.com/argoproj/argo-workflows/releases/tag/v4.0.5 · Note
• https://twitter.com/CVEnew/status/2053131391014248731 · Twitter Post
• https://twitter.com/CVEarity/status/2053780183853973626 · Twitter Post
• https://t.me/CVEtracker/53204 · Telegram Post
• https://twitter.com/VulmonFeeds/status/2053039706724593988 · Twitter Post