Contrast workload secrets leak to logs on INFO level

Impact When the Contrast initializer is configured with a CONTRASTLOGLEVEL of info or debug, the workload secret is logged to stderr and written to Kubernetes logs. Since info is the default setting, this affects all Contrast installations that don't customize their initializers' log level. The...

GHSA-H5F8-CRRQ-4PW8 Contrast workload secrets leak to logs on INFO level

Impact When the Contrast initializer is configured with a CONTRASTLOGLEVEL of info or debug, the workload secret is logged to stderr and written to Kubernetes logs. Since info is the default setting, this affects all Contrast installations that don't customize their initializers' log level. The...

PT-2026-99446

Name of the Vulnerable Software and Affected Versions Contrast Edgeless Systems versions prior to 1.8.1 Description The Contrast initializer logs the workload secret to stderr, which directs the information into Kubernetes logs. This occurs when the CONTRAST LOG LEVEL variable is set to info or...

PT-2026-99447

Name of the Vulnerable Software and Affected Versions Contrast versions prior to 1.4.1 Description A recovering Coordinator fails to verify the seed provided by the recovering party. This allows an attacker to establish a rogue Coordinator with a validated manifest but an attacker-controlled secr...