Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the install-cni process. An attacker can obtain sensitive ServiceAccount tokens by accessing container logs, which may allow them to perform unauthorized actions such as patching pod...

PT-2026-44409

Name of the Vulnerable Software and Affected Versions Calico affected versions not specified Description The install-cni init container logs the rendered CNI configuration to standard output. In Canal or Flannel-Calico deployments where the configuration template uses the SERVICEACCOUNT TOKEN...