TI-2025-37275 CVE-2025-59836 · GHSA-4p3p-cr38-v5xp
Omni is Vulnerable to DoS via Empty Create/Update Resource Requests
Priority HIGH 72
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud.
siderolabs
Records8All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
siderolabs records in CISA KEVNo siderolabs vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
8 records
TI-2025-38119 CVE-2025-61688 · GHSA-77r9-w39m-9xh5
Omni leaks information via the API
Priority MEDIUM 43
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud.
TI-2022-16526 CVE-2022-36103 · GHSA-7hgc-php5-77qq
Talos worker join token can be used to get elevated access level to the Talos API
Priority MEDIUM 41
Talos Linux is a Linux distribution built for Kubernetes deployments.
TI-2026-33464 CVE-2026-45726 · GHSA-wv8c-6mx2-xf4j
Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService
Priority LOW 34
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud.
TI-2026-33459 CVE-2026-45720 · GHSA-5x9f-6vg5-qg4m
Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token
Priority LOW 32
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud.
TI-2026-74326 CVE-2026-77564 · GHSA-7cxh-94cf-mfp6
Talos Linux support bundles include unredacted registry credentials
Priority LOW 15
Talos Linux is a Linux distribution built for Kubernetes deployments.
TI-2026-33462 CVE-2026-45723 · GHSA-c66c-vq6w-fvh5
Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic
Priority LOW 14
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud.
TI-2025-37263 CVE-2025-59824 · GHSA-hqrf-67pm-wgfq
Omni Wireguard SideroLink potential escape
Priority LOW 4
Omni manages Kubernetes on bare metal, virtual machines, or in a cloud.