A vulnerability, which was classified as problematic, was found in argoproj argo-workflows. This impacts an unknown function of the component ZIP File Handler. Such manipulation leads to relative path traversal.

This vulnerability is listed as CVE-2025-66626. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.