Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

2 records

Release: Tigera Calico, Calico Cloud 22.4.0, 3.32.0 Clear all filters
TI-2026-29808 CVE-2026-41185 · GHSA-m67g-87rx-v42c

ServiceAccount token disclosure via Azure IPAM CNI plugin logs

Priority LOW 27

When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin.

CVSS 4.0MEDIUM 6.0 Network Low privileges No interaction EPSS 0.00323 Published 2026-05-28 Fixed in 3.32.0, 3.21.7 +4 CWE-532
TI-2026-05888 CVE-2026-6720 · GHSA-3m4q-ggcj-j6m4

Calicoctl leaks cluster credentials to stderr when verbose logging is enabled

Priority LOW 31

When calicoctl is invoked with --log-level=info or --log-level=debug, the client prints the full contents of its loaded connection-configuration struct to stderr in a single log line.

CVSS 4.0HIGH 7.2 Network Low privileges User interaction EPSS 0.00224 Published 2026-05-28 Fixed in 3.32.0, 3.21.7 +3 CWE-532