Insertion of Sensitive Information into Log File

Overview github.com/projectcalico/calico/cni-plugin/pkg/install is a cloud-native networking and network security package Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the install-cni process. An attacker can obtain sensitive ServiceAccoun...

Insertion of Sensitive Information into Log File

Overview Affected versions of this package are vulnerable to Insertion of Sensitive Information into Log File in the install-cni process. An attacker can obtain sensitive ServiceAccount tokens by accessing container logs, which may allow them to perform unauthorized actions such as patching pod...

PT-2026-44409

Name of the Vulnerable Software and Affected Versions Calico affected versions not specified Description The install-cni init container logs the rendered CNI configuration to standard output. In Canal or Flannel-Calico deployments where the configuration template uses the SERVICEACCOUNT TOKEN...

PT-2026-55385

In Calico, the install-cni init container logs the rendered CNI configuration to standard output. When the configuration template uses the SERVICEACCOUNT TOKEN placeholder Canal/Flannel-Calico deployments, the installer substitutes the live Kubernetes ServiceAccount bearer token before logging,...

CVE-2025-4563 vulnerabilities

Vulnerabilities for packages: mesosphere-vsphere-csi, emissary, kubernetes-csi-driver-hostpath, docker-machine-driver-harvester, rancher-fleet, yunikorn-k8shim, rancher-system-agent, cloud-provider-gcp-cloud-controller-manager, vcluster...

Security Bulletin: A Security Vulnerability could affect IBM Cloud Private

Summary IBM Cloud Private could allow a remote attacker to bypass security restrictions due to Calico CNI Logging which can expose Kubernetes service account tokens Vulnerability Details CVEID: Not Applicable DESCRIPTION: Project Calico could allow a local attacker to obtain sensitive information...