Threats tagged 'ghsa-c2hv-4pfj-mm2r'

CVE-2025-62157 is a vulnerability in Argo Workflows (versions >=3.7.0 <3.7.3 and <3.6.12) where an attacker with permissions to read pod logs in the Argo namespace can access plaintext artifact repository credentials from the workflow-controller logs. This exposure allows unauthorized access to the artifact repository, enabling data theft, tampering, or deletion.