CLEANSTART-2026-RZ17018: On Windows, when the target of Root

Q: Which environments should be prioritized for investigation?

Prioritize Windows deployments using the cleanstart/kubernetes or cleanstart/argo-workflows packages. The available data does not identify affected versions or configurations beyond the Windows-related condition.

Q: Does exploitation require an authenticated account or user interaction?

No. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

Q: What could a successful exploit allow?

The CVSS vector indicates high impact to confidentiality, integrity, and availability. This means successful exploitation could result in significant data exposure, modification, and service disruption.

Published Nov 11, 2026

Updated

CVE-2026-56857 affects multiple packages. On Windows, when the target of Root. See references for individual vulnerability details.

Affected Software

3 affected componentsFixes available

cleanstart/kubernetes<1.34.11-r0

1.34.11-r0

cleanstart/kubernetes<1.34.13-r2

1.34.13-r2

cleanstart/argo-workflows<4.1.6-r1

4.1.6-r1

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/kubernetes to a version that resolves this vulnerability.
Fixed in 1.34.11-r0
Upgrade
Upgrade cleanstart/kubernetes to a version that resolves this vulnerability.
Fixed in 1.34.13-r2
Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.1.6-r1

Event History

Nov 11, 2026

Advisory Published

via OSV·12:38 AM

Data Sourced

via OSV·12:38 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-56857

Frequently Asked Questions

Which environments should be prioritized for investigation?

Prioritize Windows deployments using the cleanstart/kubernetes or cleanstart/argo-workflows packages. The available data does not identify affected versions or configurations beyond the Windows-related condition.

Does exploitation require an authenticated account or user interaction?

No. The supplied CVSS vector indicates network-based exploitation with low attack complexity, no privileges required, and no user interaction required.

What could a successful exploit allow?

The CVSS vector indicates high impact to confidentiality, integrity, and availability. This means successful exploitation could result in significant data exposure, modification, and service disruption.

CLEANSTART-2026-RZ17018: On Windows, when the target of Root

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

Which environments should be prioritized for investigation?

Does exploitation require an authenticated account or user interaction?

What could a successful exploit allow?

Company

Resources

Contact

Frequently Asked Questions

Which environments should be prioritized for investigation?

Does exploitation require an authenticated account or user interaction?

What could a successful exploit allow?