# CVE-2026-23960: Argo Workflows stored XSS in artifact directory listing

Source: https://junglewise.ai/threats/cve-2026-23960-argo-workflows-stored-xss-in-artifact-directory-listing  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-01-21. Updated: 2026-06-30  
License: CC BY 4.0 with a link back

CVE-2026-23960 · Severity: medium · CVSS 5.4 · Published 2026-01-21

Argo Workflows, a tool used to manage complex computing tasks on Kubernetes, contains a security flaw in how it displays file directories. An attacker with the ability to create workflows can inject malicious scripts that run in the browsers of other users, such as administrators. This could allow the attacker to perform unauthorized actions or access sensitive data using the victim's account permissions.

Technologies: [Argo Project Argo Workflows](https://junglewise.ai/threats/technologies/workflows), [github.com/argoproj/argo-workflows (Go)](https://junglewise.ai/threats/technologies/github-com-argoproj-argo-workflows), [github.com/argoproj/argo-workflows/v2 (Go)](https://junglewise.ai/threats/technologies/github-com-argoproj-argo-workflows-v2), [github.com/argoproj/argo-workflows/v3 (Go)](https://junglewise.ai/threats/technologies/github-com-argoproj-argo-workflows-v3). Vendors: [Argo Project](https://junglewise.ai/threats/vendors/argo-project), [Go](https://junglewise.ai/threats/vendors/go).

## Quick answers

**Is CVE-2026-23960 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-23960 being exploited in the wild.

**How severe is CVE-2026-23960?** Medium severity, with a CVSS score of 5.4, published 21 January 2026.

**Which products and versions are affected?** Argo Project Argo Workflows < 3.6.17, >= 3.7.0, < 3.7.8; github.com/argoproj/argo-workflows (Go) SEMVER:introduced=0, SEMVER:introduced=0,last_affected=2.5.3-rc4; github.com/argoproj/argo-workflows/v2 (Go) SEMVER:introduced=0; github.com/argoproj/argo-workflows/v3 (Go) SEMVER:introduced=0,fixed=3.6.17, SEMVER:introduced=0,fixed=3.6.17,introduced=3.7.0,fixed=3.7.8.

**Is there a fix for CVE-2026-23960?** Yes. github.com/argoproj/argo-workflows/v3 (Go): upgrade to 3.6.17, 3.7.8 or later. Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-23960 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-23960?** Check whether you run Argo Project Argo Workflows, github.com/argoproj/argo-workflows (Go), github.com/argoproj/argo-workflows/v2 (Go) or one of the others listed at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## How to fix

- github.com/argoproj/argo-workflows/v3 (Go): upgrade to 3.6.17, 3.7.8 or later

  ```sh
  go get github.com/argoproj/argo-workflows/v3@v3.7.8
  ```


## Technical details

A stored cross-site scripting (XSS) vulnerability exists in the Argo Workflows artifact directory listing. The root cause is improper neutralization of input during the generation of the web page for artifact listings in 'artifact_server.go'. An attacker with workflow creation privileges (PR:L) can craft malicious artifact names or paths that, when viewed by another user (UI:R), execute arbitrary JavaScript under the Argo Server origin. This can be leveraged to perform API requests with the victim's authorization. The issue is resolved in versions 3.6.17 and 3.7.8 by implementing proper HTML templating and escaping.

## Affected products

- argoproj Argo Workflows < 3.6.17, >= 3.7.0, < 3.7.8
- Red Hat Red Hat OpenShift AI (RHOAI)

## Identifiers

- CVE-2026-23960
- GHSA-cv78-6m8q-ph82
- GO-2026-4350

## Timeline

- 2026-01-21: disclosed
- 2026-01-21: patched: Versions 3.6.17 and 3.7.8 released
- 2026-01-21: advisory

## References

- [https://github.com/argoproj/argo-workflows/blob/9872c296d29dcc5e9c78493054961ede9fc30797/server/artifacts/artifact_server.go](https://github.com/argoproj/argo-workflows/blob/9872c296d29dcc5e9c78493054961ede9fc30797/server/artifacts/artifact_server.go)
- [https://github.com/argoproj/argo-workflows/commit/159a5c56285ecd4d3bb0a67aeef4507779a44e17](https://github.com/argoproj/argo-workflows/commit/159a5c56285ecd4d3bb0a67aeef4507779a44e17)
- [https://github.com/argoproj/argo-workflows/releases/tag/v3.6.17](https://github.com/argoproj/argo-workflows/releases/tag/v3.6.17)
- [https://github.com/argoproj/argo-workflows/releases/tag/v3.7.8](https://github.com/argoproj/argo-workflows/releases/tag/v3.7.8)
- [https://github.com/argoproj/argo-workflows/security/advisories/GHSA-cv78-6m8q-ph82](https://github.com/argoproj/argo-workflows/security/advisories/GHSA-cv78-6m8q-ph82)
- [https://access.redhat.com/security/cve/CVE-2026-23960](https://access.redhat.com/security/cve/CVE-2026-23960)
- [https://bugzilla.redhat.com/show_bug.cgi?id=2431881](https://bugzilla.redhat.com/show_bug.cgi?id=2431881)

## Related threats

- [Argo Workflows authorization bypass in ListArchivedWorkflows](https://junglewise.ai/threats/cve-2026-93991-argo-workflows-versions-4-1-0-through-4-1-3-contain-an)
- [Argo Workflows privilege escalation via ArtifactGC PodSpecPatch](https://junglewise.ai/threats/cve-2026-54526-argo-workflows-privilege-escalation-via-artifactgc-podspecpatch)
- [Argo Workflows missing authorization in Sync ConfigMap Provider](https://junglewise.ai/threats/cve-2026-42297-argo-workflows-missing-authorization-in-sync-configmap-provider)
- [Argo Workflows authorization bypass in templateReferencing Strict mode](https://junglewise.ai/threats/cve-2026-42296-argo-workflows-authorization-bypass-in-templatereferencing-strict)
- [Argo Workflows plaintext credential leak in workflow logs](https://junglewise.ai/threats/cve-2026-42295-argo-workflows-plaintext-credential-leak-in-workflow-logs)