Read the docs
TI-2026-29807 Aliases CVE-2026-41184GHSA-9p7w-w5q6-mxj3

ServiceAccount token disclosure via install-cni container logs

Priority LOW 27CWE-532Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Attack requirements
Present
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-532.

Summary

In Calico, the install-cni init container logs the rendered CNI configuration to standard output. When the configuration template uses the __SERVICEACCOUNT_TOKEN__ placeholder (Canal/Flannel-Calico deployments), the installer substitutes the live Kubernetes ServiceAccount bearer token before logging, exposing the token to any authenticated user with pods/log permission in the namespace with calico-node. The token holds patch privileges on pods/status, enabling annotation-based attacks against cluster workloads. The default kubeconfig-based authentication path is not affected. This is a direct regression of TTA-2018-001.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00504 43rd percentileScored 2026-11-07
Fix Fixed Calico (Tigera): 3.32.0, 3.31.6github.com/projectcalico/calico (Go): 3.31.6, 1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
TigeraCalicobefore 3.31.63.32.0, 3.31.6Patch availableCNA
—github.com/projectcalico/calico (Go)2.0.0 to before 3.31.63.31.6Patch availableGHSA-9p7w-w5q6-mxj3
—github.com/projectcalico/calico (Go)before 1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0fPatch availableGHSA-9p7w-w5q6-mxj3
  • Calico VendorTigera Affected before 3.31.6 Fixed in 3.32.0, 3.31.6 Patch available CNA
  • github.com/projectcalico/calico (Go) Vendor— Affected 2.0.0 to before 3.31.6 Fixed in 3.31.6 Patch available GHSA-9p7w-w5q6-mxj3
  • github.com/projectcalico/calico (Go) Vendor— Affected before 1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f Fixed in 1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f Patch available GHSA-9p7w-w5q6-mxj3

CPE configurations NVD · 4

CPEVersionsRoleVendor
cpe:2.3:a:tigera:calico:*:*:*:*:enterprise:*:*:*before 3.21.7VulnerableTigera
cpe:2.3:a:tigera:calico:*:*:*:*:open_source:*:*:*before 3.32.0VulnerableTigera
cpe:2.3:a:tigera:calico:*:*:*:*:cloud:*:*:*before 22.4.0VulnerableTigera
cpe:2.3:a:tigera:calico:*:*:*:*:enterprise:*:*:*3.22.0 to before 3.22.3VulnerableTigera
  • cpe:2.3:a:tigera:calico:*:*:*:*:enterprise:*:*:* Versions before 3.21.7 Vulnerable ·Tigera
  • cpe:2.3:a:tigera:calico:*:*:*:*:open_source:*:*:* Versions before 3.32.0 Vulnerable ·Tigera
  • cpe:2.3:a:tigera:calico:*:*:*:*:cloud:*:*:* Versions before 22.4.0 Vulnerable ·Tigera
  • cpe:2.3:a:tigera:calico:*:*:*:*:enterprise:*:*:* Versions 3.22.0 to before 3.22.3 Vulnerable ·Tigera

Remediation

  • Fix · CNA Calico (Tigera) Fixed in 3.32.0, 3.31.6
  • Fix · GHSA-9p7w-w5q6-mxj3 github.com/projectcalico/calico (Go) Fixed in 3.31.6 Advisory →
  • Fix · GHSA-9p7w-w5q6-mxj3 github.com/projectcalico/calico (Go) Fixed in 1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-41184
  2. 2026-10-03 Alias added: GHSA-9p7w-w5q6-mxj3

References

Patch 3

Advisory 2

Other 5

  • TI-2026-05735 L7 policy bypass via unnormalized HTTP path matching CVSS 4.0HIGH 7.9
  • TI-2026-29810 Calico Tier Authorization Bypass via DeleteCollection CVSS 4.0MEDIUM 6.2
  • TI-2026-29809 Unauthenticated Go pprof exposure in Calico debug server CVSS 4.0MEDIUM 6.0
  • TI-2026-29808 ServiceAccount token disclosure via Azure IPAM CNI plugin logs CVSS 4.0MEDIUM 6.0
  • TI-2022-11010 Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature CVSS 3.1MEDIUM 5.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences