Lucene search
+L

1 matches found

OSV
OSV
added 2026/05/28 3:47 p.m.9 views

CVE-2026-6720 Calicoctl leaks cluster credentials to stderr when verbose logging is enabled

When calicoctl is invoked with --log-level=info or --log-level=debug, the client prints the full contents of its loaded connection-configuration struct to stderr in a single log line. The struct embeds every credential calicoctl uses to talk to the cluster — inline kubeconfig with bearer token,...

7.2CVSS6AI score
SaveExploits0References6
Rows per page
Query Builder