CVE-2025-71425 Contrast before 1.8.1 Information Disclosure via Logging

Contrast Edgeless Systems before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when the Contrast initializer is configured with CONTRASTLOGLEVEL set to info or debug. Because info is the default, all installations that do not customize the initializer log level are...

CVE-2025-71425

The Contrast product (Edgeless Systems) before version 1.8.1 is vulnerable to Information Disclosure via logging. When the CONTRAST_LOG_LEVEL is set to info (the default) or debug, the Contrast initializer logs the workload secret to stderr. This exposes secrets to Kubernetes users with get or li...