CLEANSTART-2026-GN69874: During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Q: What access does an attacker need to exploit this issue?

The supplied severity vector indicates network attack access, low attack complexity, no privileges required, and no user interaction required. Successful exploitation affects availability only.

Q: What is the likely operational impact?

An attacker may cause excessive certificate-chain-building work by supplying a large number of intermediate certificates through VerifyOptions, potentially resulting in a denial of service. The provided data does not indicate confidentiality or integrity impact.

Published Nov 11, 2026

Updated

Security vulnerability affects the argo-workflows package. During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions.

Affected Software

1 affected componentFixes available

cleanstart/argo-workflows<4.1.6-r1

4.1.6-r1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.1.6-r1

Event History

Nov 11, 2026

Advisory Published

via OSV·12:38 AM

Data Sourced

via OSV·12:38 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-32280

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The supplied severity vector indicates network attack access, low attack complexity, no privileges required, and no user interaction required. Successful exploitation affects availability only.

What is the likely operational impact?

An attacker may cause excessive certificate-chain-building work by supplying a large number of intermediate certificates through VerifyOptions, potentially resulting in a denial of service. The provided data does not indicate confidentiality or integrity impact.

CLEANSTART-2026-GN69874: During chain building, the amount of work that is done is not correctly limited when a large number of intermediate certificates are passed in VerifyOptions

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the likely operational impact?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What is the likely operational impact?