Executive brief
Argo Workflow has a Zipslip Vulnerability in github.com/argoproj/argo-workflows
Affected products
- Go github.com/argoproj/argo-workflows/v3
- Go github.com/argoproj/argo-workflows/v2
- Go github.com/argoproj/argo-workflows
Junglewise Threat Intelligence
CVE-2025-62156: GO-2025-4023 - Argo Workflow has a Zipslip Vulnerability in github.com/argoproj/argo-workflows
CVE-2025-62156 · Severity: low · CVSS 3.1 · Published 2025-11-05
Technologies: github.com/argoproj/argo-workflows/v3 (Go), github.com/argoproj/argo-workflows/v2 (Go), github.com/argoproj/argo-workflows (Go). Vendors: Go.
Related threats
- Argo Workflows privilege escalation via ArtifactGC PodSpecPatch
- Argo Workflows missing authorization in Sync ConfigMap Provider
- Argo Workflows authorization bypass in templateReferencing Strict mode
- Argo Workflows plaintext credential leak in workflow logs
- Argo Workflows denial of service in Webhook Interceptor