8.3
High
CVE-2026-93991 Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows…
Description
Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vulnerability in ListArchivedWorkflows that fails to apply cluster-scoped access review when the metadata.namespace field selector uses the NotEquals operator. Attackers with namespace-scoped list permissions can use a negated namespace field selector to retrieve archived workflows from all other namespaces, exposing spec arguments, parameter values, and annotations.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| argo-workflows 4.1 | 4.1.0 → < 4.1.4 | 4.1.4 |
References
- GitHub Security Advisory (GHSA-q65w-j2vp-47c4) github.com
- github.com github.com
- argo-workflows v4.1.4 Release Notes github.com
- github.com github.com
- VulnCheck Advisory: Argo Workflows 4.1.0 through 4.1.3 Cross-Namespace Disclosure via Negated Selector www.vulncheck.com
Timeline
- Published
- Last modified
Other CVEs of argo-workflows
The 17 CVEs of argo-workflows →
CVE-2026-54526
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
8.9
High
CVE-2026-42296
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
8.1
High
CVE-2026-42295
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
8.5
High
CVE-2026-42294
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes
8.2
High