Lucene search
+L

3 matches found

Github Security Blog
Github Security Blog
•added 2026/10/15 8:20 p.m.•4 views

Talos Linux: Support bundle does not redact registry credentials

Summary When generating a support bundle with talosctl support the credentials entered for private registries are included in the bundle. Details Within the generated support bundle, inside resources/registryconfigs.cri.talos.dev.yaml the auth field of the spec is retained. The same, potentially...

3.3CVSS5.7AI score0.00132EPSS
SaveExploits0References11Affected Software1
osv-cve
osv-cve
•added 2026/10/14 4:09 p.m.•4 views

CVE-2026-77564 Talos Linux: Support bundle does not redact registry credentials

Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and 1.13.3, talosctl support includes the auth field from resources/registryconfigs.cri.talos.dev.yaml and sensitive content from etcfilespecs.files.talos.dev.yaml in generated support bundles instead of marking...

3.3CVSS5.8AI score
SaveExploits0References11
CVE
CVE
•added 2026/10/14 4:09 p.m.•9 views

CVE-2026-77564

In Talos Linux versions prior to 1.12.9 and 1.13.3 , the talosctl utility fails to redact sensitive information when generating support bundles. Specifically, the auth field from resources/registryconfigs.cri.talos.dev.yaml and sensitive content from etcfilespecs.files.talos.dev.yaml are included...

3.3CVSS5.8AI score0.00132EPSS
SaveExploits0References9
Rows per page
Query Builder