CVE-2026-125672

A flaw in cockpit-storaged allows for curl option injection because a Tang keyserver address read from an untrusted clevis token in a LUKS header is concatenated into a curl argument vector without a "--" separator. If an attacker attaches a crafted LUKS/clevis block device, they can trick an adm...