Lucene search
+L

2 matches found

osv_bit
osv_bit
•added 2026/05/12 8:38 a.m.•57 views

BIT-ARGO-WORKFLOWS-2026-42295 Argo Workflows: Exposure of artifact repository credentials

Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the workflow executor logs all artifact repository credentials S3 access keys, secret keys, GCS service account keys, Azure account keys, Gi...

8.5CVSS7.9AI score0.00357EPSS
SaveExploits1References3
Positive Technologies
Positive Technologies
•added 2026/05/04 12:00 a.m.•48 views

PT-2026-37193

Name of the Vulnerable Software and Affected Versions Argo Workflows versions 4.0.0 through 4.0.4 Description The workflow executor logs artifact repository credentials in plaintext during artifact operations. This occurs because the logging driver passes the entire ArtifactDriver struct to the...

8.5CVSS8.1AI score0.00357EPSS
SaveExploits1
Rows per page
Query Builder