Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.

Code

The project this record applies to. Exploit listings stay in References.

• Repository · github.com

Timeline

Detection, updates, and resolution for this record.

1. May 9, 2026 · NIST NVD

   Detected

   Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the workflow executor logs all artifact repository credentials (S3 access keys, secret keys, GCS service account keys, Azure account keys, Git passwords, etc.) in plaintext on artifact operation. Any user with read access to workflow pod logs

2. Jul 24, 2026 · NIST NVD

   Updated

   Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the workflow executor logs all artifact repository credentials (S3 access keys, secret keys, GCS service account keys, Azure account keys, Git passwords, etc.) in plaintext on artifact operation. Any user with read access to workflow pod logs

Affected

• cpe argoproj/argo workflowsversion unspecified

Sources

• CVE.orgVulnerability recordCVE-2026-42295

  Official CVE identifier

  cve.org
• NIST NVDVulnerability recordCVE-2026-42295

  Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the workflow executor logs all artifact repository credentials (S3 access keys, secret keys, GCS service account keys, Azur

  nvd.nist.gov

References

• Release Notes · github.com
• Exploit · github.com