PT-2026-40269 · Bitnami · Argo Workflows
Published
2026-05-12
·
Updated
2026-05-12
None
No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, a nil pointer dereference in server/auth/gatekeeper.go rbacAuthorization() causes a panic (denial of service) for SSO users whose claims match a namespace-level RBAC rule but not an SSO-namespace rule, when SSO DELEGATE RBAC TO NAMESPACE=true. This issue has been patched in version 4.0.5.
Found an issue in the description? Have something to add? Feel free to write us 👾
Related Identifiers
Affected Products
Argo Workflows