# CVE-2026-93991: Argo Workflows authorization bypass in ListArchivedWorkflows

Source: https://junglewise.ai/threats/cve-2026-93991-argo-workflows-versions-4-1-0-through-4-1-3-contain-an  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-09-19. Updated: 2026-09-26  
License: CC BY 4.0 with a link back

CVE-2026-93991 · Severity: high · CVSS 7.7 · Published 2026-09-19

Argo Workflows, a container orchestration tool for Kubernetes, contains an authorization flaw in its archived workflow retrieval function. An attacker with permission to list workflows in one namespace can bypass access controls using a negated field selector to view archived workflows from all other namespaces, potentially exposing sensitive job parameters, values, and metadata.

Technologies: [Argo Project Argo Workflows](https://junglewise.ai/threats/technologies/workflows). Vendors: [Argo Project](https://junglewise.ai/threats/vendors/argo-project).

## Quick answers

**Is CVE-2026-93991 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-93991 being exploited in the wild.

**How severe is CVE-2026-93991?** High severity, with a CVSS score of 7.7, published 19 September 2026.

**Which products and versions are affected?** Argo Project Argo Workflows 4.1.0 through 4.1.3.

**Is there a fix for CVE-2026-93991?** No fixed version is recorded yet. Check the vendor's advisory in the references below. If you run it, Junglewise drafts a mitigation that fits your setup and applies it once you approve, with senior security engineers behind it.

**How is CVE-2026-93991 attacked?** It is attacked over the network, in a software library.

**Am I affected by CVE-2026-93991?** Check whether you run Argo Project Argo Workflows at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

The ListArchivedWorkflows API endpoint fails to apply cluster-scoped authorization review when a metadata.namespace field selector uses the NotEquals operator, allowing an attacker with namespace-scoped list permissions to retrieve archived workflows outside their authorized namespace. The vulnerability exists because the normalization logic that switches to cluster-wide access checks for negated selectors was implemented for live workflows but missed in the archived workflow path. An attacker can construct a negated namespace field selector to enumerate and access archived workflows from unauthorized namespaces.

## Affected products

- Argo Project Argo Workflows 4.1.0 through 4.1.3

## Timeline

- 2026-09-19: disclosed

## References

- [https://github.com/argoproj/argo-workflows](https://github.com/argoproj/argo-workflows)
- [https://github.com/argoproj/argo-workflows/commit/a40972386c097ddf816d2e60e13f058bedca53d9](https://github.com/argoproj/argo-workflows/commit/a40972386c097ddf816d2e60e13f058bedca53d9)

## Related threats

- [Argo Workflows privilege escalation via ArtifactGC PodSpecPatch](https://junglewise.ai/threats/cve-2026-54526-argo-workflows-privilege-escalation-via-artifactgc-podspecpatch)
- [Argo Workflows missing authorization in Sync ConfigMap Provider](https://junglewise.ai/threats/cve-2026-42297-argo-workflows-missing-authorization-in-sync-configmap-provider)
- [Argo Workflows authorization bypass in templateReferencing Strict mode](https://junglewise.ai/threats/cve-2026-42296-argo-workflows-authorization-bypass-in-templatereferencing-strict)
- [Argo Workflows plaintext credential leak in workflow logs](https://junglewise.ai/threats/cve-2026-42295-argo-workflows-plaintext-credential-leak-in-workflow-logs)
- [Argo Workflows denial of service in Webhook Interceptor](https://junglewise.ai/threats/cve-2026-42294-argo-workflows-denial-of-service-in-webhook-interceptor)