ServiceAccount token disclosure via Azure IPAM CNI plugin logs
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- Present
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-532.
Summary
When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map (stdinData) at INFO level to /var/log/calico/cni/cni.log on every CNI ADD and DEL invocation — once per pod scheduled or terminated on the node. When the cluster is deployed using token-based Kubernetes authentication, this log entry contains the ServiceAccount token, client key, and certificate authority in plaintext. Any principal with read access to /var/log/calico/cni/cni.log on a node can read these logs and extract the credentials, which grant cluster-wide Calico networking admin privileges.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Tigera | Calico | before 3.32.0 | 3.32.0 | Patch available | CNA |
| Tigera | Calico Enterprise | before 3.21.7; 3.22.0 to before 3.22.3 | 3.21.7, 3.22.3 | Patch available | CNA |
| Tigera | Calico Cloud | before 22.4.0 | 22.4.0 | Patch available | CNA |
| — | github.com/projectcalico/calico (Go) | 2.0.0 to before 3.31.6 | 3.31.6 | Patch available | GHSA-m67g-87rx-v42c |
| — | github.com/projectcalico/calico (Go) | before 1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f | 1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f | Patch available | GHSA-m67g-87rx-v42c |
- Calico VendorTigera Affected before 3.32.0 Fixed in 3.32.0 Patch available CNA
- Calico Enterprise VendorTigera Affected before 3.21.7; 3.22.0 to before 3.22.3 Fixed in 3.21.7, 3.22.3 Patch available CNA
- Calico Cloud VendorTigera Affected before 22.4.0 Fixed in 22.4.0 Patch available CNA
- github.com/projectcalico/calico (Go) Vendor— Affected 2.0.0 to before 3.31.6 Fixed in 3.31.6 Patch available GHSA-m67g-87rx-v42c
- github.com/projectcalico/calico (Go) Vendor— Affected before 1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f Fixed in 1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f Patch available GHSA-m67g-87rx-v42c
CPE configurations NVD · 4
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:tigera:calico:*:*:*:*:enterprise:*:*:* | before 3.21.7 | Vulnerable | Tigera |
| cpe:2.3:a:tigera:calico:*:*:*:*:open_source:*:*:* | before 3.32.0 | Vulnerable | Tigera |
| cpe:2.3:a:tigera:calico:*:*:*:*:cloud:*:*:* | before 22.4.0 | Vulnerable | Tigera |
| cpe:2.3:a:tigera:calico:*:*:*:*:enterprise:*:*:* | 3.22.0 to before 3.22.3 | Vulnerable | Tigera |
- cpe:2.3:a:tigera:calico:*:*:*:*:enterprise:*:*:* Versions before 3.21.7 Vulnerable ·Tigera
- cpe:2.3:a:tigera:calico:*:*:*:*:open_source:*:*:* Versions before 3.32.0 Vulnerable ·Tigera
- cpe:2.3:a:tigera:calico:*:*:*:*:cloud:*:*:* Versions before 22.4.0 Vulnerable ·Tigera
- cpe:2.3:a:tigera:calico:*:*:*:*:enterprise:*:*:* Versions 3.22.0 to before 3.22.3 Vulnerable ·Tigera
Remediation
- Fix · CNA Calico (Tigera) Fixed in 3.32.0
- Fix · CNA Calico Enterprise (Tigera) Fixed in 3.21.7, 3.22.3
- Fix · CNA Calico Cloud (Tigera) Fixed in 22.4.0
- Fix · GHSA-m67g-87rx-v42c github.com/projectcalico/calico (Go) Fixed in 3.31.6 Advisory →
- Fix · GHSA-m67g-87rx-v42c github.com/projectcalico/calico (Go) Fixed in 1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f Advisory →
Fixed in the same release
Records fixed by the same vendor advisory or release, as the CNA lists them.
- Release ·
Tigera Calico, Calico Cloud 22.4.0, 3.32.0
2 records Highest priority Priority LOW 2 LOW
Other records, highest priority first
- TI-2026-05888 Calicoctl leaks cluster credentials to stderr when verbose logging is enabledPriority LOW 31
Timeline
- 2026-10-02 Threatist record created from CVE-2026-41185
- 2026-10-03 Alias added: GHSA-m67g-87rx-v42c
References
Patch 3
Advisory 2
Other 5
- https://github.com/projectcalico/calico/commit/0ca653db0ae7400ea9fb066daa7f45c902482271
- https://github.com/projectcalico/calico/commit/cd73bc2cea0f4989772f2deb93909e7cfac927e0
- https://github.com/projectcalico/calico/commit/da9ea3a13927a35e4022b787d17a005b2157d812
- https://github.com/projectcalico/calico
- https://www.tigera.io/security-bulletins/tta-2026-002
More Tigera Calico vulnerabilities
- TI-2026-05735 L7 policy bypass via unnormalized HTTP path matching CVSS 4.0HIGH 7.9
- TI-2026-29810 Calico Tier Authorization Bypass via DeleteCollection CVSS 4.0MEDIUM 6.2
- TI-2026-29809 Unauthenticated Go pprof exposure in Calico debug server CVSS 4.0MEDIUM 6.0
- TI-2026-29807 ServiceAccount token disclosure via install-cni container logs CVSS 4.0MEDIUM 6.0
- TI-2022-11010 Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature CVSS 3.1MEDIUM 5.5
Sources
- CVE-2026-41185 · CVE Program
- CVE-2026-41185 · NVD
- FIRST EPSS
- GHSA-m67g-87rx-v42c · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences