Authorization Bypass in Argo Workflows by Argo Project

CVE-2026-93991

What is CVE-2026-93991?

Argo Workflows versions 4.1.0 through 4.1.3 are vulnerable to an authorization bypass that can lead to unauthorized access to archived workflows. The vulnerability manifests when the ListArchivedWorkflows function fails to enforce proper cluster-scoped access review for requests using the NotEquals operator with the metadata.namespace field selector. As a result, attackers with namespace-scoped list permissions can exploit this flaw to access archived workflows across all namespaces, exposing sensitive information such as specification arguments, parameter values, and annotations.

References