CVE-2026-44728 is a high-severity security vulnerability affecting the argo-workflows package, related to the Babel JavaScript compiler. The flaw impacts versions prior to 4.1.6-r1 and 4.0.15-r2. It allows an attacker with local access and no privileges to execute actions requiring user interaction, potentially leading to full confidentiality, integrity, and availability compromise. A patch is available in versions 4.1.6-r1 and 4.0.15-r2.