Skip to content
Threat Feed

Vendor

Argoproj

2 briefs RSS
high advisory

Argo Workflows Credentials Exposed in Pod Logs

Argo Workflows versions 4.0.0 to 4.0.4 log artifact repository credentials in plaintext, allowing users with read access to pod logs to extract sensitive information such as S3 access keys and GCS service account keys.

argo-workflows credential-access kubernetes
2r 1t 1c
medium advisory

Argo Workflows Webhook Interceptor Vulnerable to Unauthenticated Memory Exhaustion (CVE-2026-42294)

Argo Workflows is vulnerable to a denial-of-service (DoS) attack due to unbounded memory allocation in the Webhook Interceptor component.

Argo Workflows < 3.7.14 +2 denial-of-service argo-workflows cloud
2r 1t