Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the workflow executor logs all artifact repository credentials (S3 access keys, secret keys, GCS service account keys, Azure account keys, Git passwords, etc.) in plaintext on artifact operation. Any user with read access to workflow pod logs can extract these credentials. This issue has been patched in version 4.0.5.
Priority
LOW
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-09 | 2 | General2 |
| 2026-05-10 | 1 | Patch1 |
| 2026-05-11 | 1 | General1 |
⚡ New CVE Alert: CVE-2026-42295 📊 Severity: 8.5 🚨 Risk Level: High 🧩 Affects: Multiple / Unspecified Products Reference: https://nvd.nist.gov/vuln/detail/CVE-2026-42295 #CVE-2026-42295 #CVE #High #CyberSecurity #InfoSec https://t.co/UG6XZjh4rq
Post summary
The tweet announces CVE-2026-42295 with a severity rating but offers no technical, exploit, or mitigation information.
🔐 Argo Workflows CVE‑2026‑42295: plaintext credential logging in pod logs. S3 keys, GCS service accounts, Azure keys, Git passwords exposed. Patch to 4.0.5 now. Rotate keys. 🔗 https://threataft.com/articles/argo-workflows-plaintext-credential-logging-cve-2026-42295 #CyberSecurity #ThreatIntel #Kubernetes #CVE #CVE202642295 #CloudSecurity
Post summary
Argo Workflows CVE-2026-42295 leads to plaintext credential logging; patch to version 4.0.5 is available and key rotation is advised.
CVE-2026-42295 Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes. From version 4.0.0 to before version 4.0.5, the workf… https://www.cve.org/CVERecord?id=CVE-2026-42295
Post summary
The text references CVE-2026-42295 in Argo Workflows, noting affected versions, but provides no technical or exploit details, making it an informational update.
CVE-2026-42295 Plaintext Credential Logging in Argo Workflows Versions 4.0.0 to 4.0.4 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-42295
Post summary
The snippet simply announces CVE‑2026‑42295, noting it involves plaintext credential logging in Argo Workflows, with no additional details on exploitation, fixes, or PoC.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | argoproj | argo_workflows | - | go | - |