Executive brief
Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows
Affected products
- Go github.com/argoproj/argo-workflows/v3
- Go github.com/argoproj/argo-workflows/v2
- Go github.com/argoproj/argo-workflows
Junglewise Threat Intelligence
CVE-2025-62157: GO-2025-4024 - Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows
CVE-2025-62157 · Severity: medium · CVSS 4 · Published 2025-11-05
Technologies: github.com/argoproj/argo-workflows/v3 (Go), github.com/argoproj/argo-workflows/v2 (Go), github.com/argoproj/argo-workflows (Go). Vendors: Go.
Related threats
- Argo Workflows privilege escalation via ArtifactGC PodSpecPatch
- Argo Workflows missing authorization in Sync ConfigMap Provider
- Argo Workflows authorization bypass in templateReferencing Strict mode
- Argo Workflows plaintext credential leak in workflow logs
- Argo Workflows denial of service in Webhook Interceptor