PT-2025-41938 · Unknown · Argo Workflows

CVE-2025-62157 · Publicado 2025-04-22 · Atualizado 2026-05-18

Positive Technologies (AI Summary) · Pt

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Nome do Software Vulnerável e Versões Afetadas Versões do Argo Workflows anteriores à 3.6.12 Versões do Argo Workflows de 3.7.0 a 3.7.2

Descrição O Argo Workflows é um mecanismo de fluxo de trabalho nativo de contêineres para Kubernetes. Versões anteriores à 3.6.12 e versões de 3.7.0 a 3.7.2 expõem credenciais de repositório de artefatos em texto simples nos logs do pod workflow-controller. Um atacante com acesso de leitura aos logs de pod em um namespace executando o Argo Workflows pode potencialmente obter essas credenciais.

Recomendações Atualize para a versão 3.6.12 ou 3.7.3.

Exploit

Correção

Insufficiently Protected Credentials

Enumeração de Fraquezas

CWE-522

Identificadores relacionados

BDU:2025-12969

BIT-ARGO-WORKFLOWS-2025-62157

CLEANSTART-2026-BY71381

CLEANSTART-2026-CV28298

CLEANSTART-2026-DS30740

CLEANSTART-2026-DV04077

CLEANSTART-2026-FQ05951

CLEANSTART-2026-FX27781

CLEANSTART-2026-HK06185

CLEANSTART-2026-JQ02410

CLEANSTART-2026-LS30652

CLEANSTART-2026-MK40719

CLEANSTART-2026-OD47693

CLEANSTART-2026-PK69606

CLEANSTART-2026-PS30901

CLEANSTART-2026-QM19832

CLEANSTART-2026-RU00721

CLEANSTART-2026-SO95938

CLEANSTART-2026-WA03785

CLEANSTART-2026-WK88787

CLEANSTART-2026-WP20592

CLEANSTART-2026-XR17407

CLEANSTART-2026-ZM51114

CVE-2025-62157

GHSA-C2HV-4PFJ-MM2R

GO-2025-4024

OPENSUSE-SU-2025:15710-1

Produtos afetados

Argo Workflows

Referências · 206

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62157.json · Exploit
• https://github.com/argoproj/argo-workflows/security/advisories/GHSA-c2hv-4pfj-mm2r · Aviso do Fabricante
• https://github.com/argoproj/argo-workflows · Nota
• https://github.com/argoproj/argo-workflows/commit/bded09fe4abd37cb98d7fc81b4c14a6f5034e9ab · Correção
• https://github.com/argoproj/argo-workflows/commit/18ad5138b6bcb2aba04e00b4ec657bc6b8fad8df · Correção
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WK88787 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-WP20592 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-DS30740 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-OD47693.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-RU00721.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-MK40719.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-XR17407.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-DV04077.json · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-PS30901 · Nota
• https://github.com/cleanstart-dev/cleanstart-security-advisories/tree/main/advisories/2026/CLEANSTART-2026-QM19832 · Nota