PT-2026-44409

In Calico, the install-cni init container logs the rendered CNI configuration to standard output. When the configuration template uses the SERVICEACCOUNT TOKEN placeholder Canal/Flannel-Calico deployments, the installer substitutes the live Kubernetes ServiceAccount bearer token before logging,...

Security Bulletin: A Security Vulnerability could affect IBM Cloud Private

Summary IBM Cloud Private could allow a remote attacker to bypass security restrictions due to Calico CNI Logging which can expose Kubernetes service account tokens Vulnerability Details CVEID: Not Applicable DESCRIPTION: Project Calico could allow a local attacker to obtain sensitive information...