CVE-2026-41185

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map stdinData at INFO level to...

PT-2024-18988 · Microsoft · Azure Ipam

Name of the Vulnerable Software and Affected Versions: Azure IPAM versions prior to 3.0.0 Description: The issue concerns the lack of validation of the passed-in authentication token in Azure IPAM, which may allow an attacker to impersonate any privileged user and access data stored within the IP...