CLEANSTART-2026-NI86167: launch-editor allows users to open files with line numbers in editor from Node

Q: Does exploitation require authentication or user interaction?

The CVSS vector indicates that no privileges and no user interaction are required. The attack vector is network-based with low attack complexity, although an additional attack requirement is present but not specified in the available data.

Q: What security impact is indicated?

The vulnerability is rated medium severity with a CVSS score of 6.3. It indicates limited impact to confidentiality, integrity, and availability, with no indicated impact on subsequent systems.

Q: Which component is identified as affected?

The affected software is identified as cleanstart/argo-workflows. No affected versions, fixed versions, configuration conditions, or mitigations are provided.

Published Nov 11, 2026

Updated

Security vulnerability affects the argo-workflows package. launch-editor allows users to open files with line numbers in editor from Node.

Affected Software

2 affected componentsFixes available

cleanstart/argo-workflows<4.0.15-r2

4.0.15-r2

cleanstart/argo-workflows<4.1.6-r1

4.1.6-r1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.0.15-r2
Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.1.6-r1

Event History

Nov 11, 2026

Advisory Published

via OSV·12:40 AM

Data Sourced

via OSV·12:40 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-112944

Frequently Asked Questions

Does exploitation require authentication or user interaction?

The CVSS vector indicates that no privileges and no user interaction are required. The attack vector is network-based with low attack complexity, although an additional attack requirement is present but not specified in the available data.

What security impact is indicated?

The vulnerability is rated medium severity with a CVSS score of 6.3. It indicates limited impact to confidentiality, integrity, and availability, with no indicated impact on subsequent systems.

Which component is identified as affected?

The affected software is identified as cleanstart/argo-workflows. No affected versions, fixed versions, configuration conditions, or mitigations are provided.

CLEANSTART-2026-NI86167: launch-editor allows users to open files with line numbers in editor from Node

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Does exploitation require authentication or user interaction?

What security impact is indicated?

Which component is identified as affected?

Company

Resources

Contact

Frequently Asked Questions

Does exploitation require authentication or user interaction?

What security impact is indicated?

Which component is identified as affected?