CVE-2026-93991

Name of the Vulnerable Software and Affected Versions Argo Workflows versions 4.1.0 through 4.1.3

Description An authorization bypass exists in the ListArchivedWorkflows function. The issue occurs when the metadata.namespace field selector utilizes the NotEquals operator, causing a failure to apply cluster-scoped access reviews. Users with namespace-scoped list permissions can employ a negated namespace field selector to retrieve archived workflows from other namespaces, potentially exposing annotations, parameter values, and spec arguments.

Recommendations Update Argo Workflows to a version later than 4.1.3.