CLEANSTART-2026-UE86740: websocket-driver is a WebSocket protocol handler with pluggable I/O

Q: What access does an attacker need to exploit this issue?

The severity vector indicates network reachability is required. It indicates low attack complexity, no privileges, and no user interaction, but also indicates that additional attack requirements must be present.

Q: What security impact is indicated?

The vector indicates no direct confidentiality or integrity impact. It indicates low availability impact on the vulnerable component and low availability impact on subsequent systems.

Published Nov 11, 2026

Updated

Security vulnerability affects the argo-workflows package. websocket-driver is a WebSocket protocol handler with pluggable I/O.

Affected Software

2 affected componentsFixes available

cleanstart/argo-workflows<4.1.6-r1

4.1.6-r1

cleanstart/argo-workflows<4.0.15-r2

4.0.15-r2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.1.6-r1
Upgrade
Upgrade cleanstart/argo-workflows to a version that resolves this vulnerability.
Fixed in 4.0.15-r2

Event History

Nov 11, 2026

Advisory Published

via OSV·12:41 AM

Data Sourced

via OSV·12:41 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2026-54490

Frequently Asked Questions

What access does an attacker need to exploit this issue?

The severity vector indicates network reachability is required. It indicates low attack complexity, no privileges, and no user interaction, but also indicates that additional attack requirements must be present.

What security impact is indicated?

The vector indicates no direct confidentiality or integrity impact. It indicates low availability impact on the vulnerable component and low availability impact on subsequent systems.

CLEANSTART-2026-UE86740: websocket-driver is a WebSocket protocol handler with pluggable I/O

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What security impact is indicated?

Company

Resources

Contact

Frequently Asked Questions

What access does an attacker need to exploit this issue?

What security impact is indicated?