CVE-2022-36103

Talos Linux is a Linux distribution built for Kubernetes deployments. Talos worker nodes use a join token to get accepted into the Talos cluster. Due to improper validation of the request while signing a worker node CSR certificate signing request Talos control plane node might issue Talos API...

CVE-2022-36103

CVE-2022-36103 affects Talos Linux (Kubernetes-focused distro). The vulnerability arises from improper validation when signing a worker node CSR, potentially allowing a control plane node to issue a Talos API certificate with full access to the Talos API. The Talos API join token is stored in wor...