VDB
GO-2025-4024
GO-2025-4024
PUBLISHED
Argo Workflow may expose artifact repository credentials in github.com/argoproj/argo-workflows
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| github.com | argoproj/argo-workflows/v3 | 3.7.0, 0, 3.7.0 |
| github.com | argoproj/argo-workflows/v2 | 0, 0 |
| github.com | argoproj/argo-workflows | 0, 0 |
Timeline
- Nov 5, 2025 CVE Published
- Feb 4, 2026 CVE Updated
- May 1, 2026 Security Advisory
References
- https://github.com/argoproj/argo-workflows/security/advisories/GHSA-c2hv-4pfj-mm2r advisory
- https://nvd.nist.gov/vuln/detail/CVE-2025-62157 advisory
- https://github.com/argoproj/argo-workflows/commit/18ad5138b6bcb2aba04e00b4ec657bc6b8fad8df patch
- https://github.com/argoproj/argo-workflows/commit/bded09fe4abd37cb98d7fc81b4c14a6f5034e9ab patch