Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
1 selected

15 records

Vendor: edgelesssys Clear all filters
TI-2026-80215 CVE-2026-116197 · GHSA-xx94-cp2x-w69r

Wildcard registry selection in Contrast imagepuller leaks credentials

Priority LOW 10

Edgeless Systems Contrast from 1.21.0 before 1.25.0 contains a non-deterministic registry selection flaw in imagepuller that can prefer wildcard configuration entries over concrete domain matches.

CVSS 4.0LOW 2.1 Adjacent network Low privileges No interaction EPSS 0.00159 Published 2026-10-25 Fixed in 1.25.0 CWE-1289
TI-2026-71175 CVE-2026-109359 · GHSA-mr8p-7h3w-x7jp

Contrast Mesh CA Key Cross-Manifest Exposure via Peer Recovery

Priority LOW 36

Contrast 1.8.0 before 1.24.1 contains an improper verification vulnerability in Coordinator peer recovery that fails to confirm the serving peer uses the same manifest generation.

CVSS 4.0HIGH 8.7 Network High privileges No interaction EPSS 0.0011 Published 2026-10-12 Fixed in 1.24.1 CWE-345
TI-2026-71174 CVE-2026-109358 · GHSA-vpr9-m7xg-f3fh

Contrast world-writable containerd config allows privilege escalation

Priority LOW 38

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable (0666).

CVSS 4.0HIGH 8.5 Local Low privileges No interaction EPSS 0.00107 Published 2026-10-12 Fixed in 1.24.1 CWE-732
TI-2026-64974 CVE-2026-100836 · GHSA-x66w-59x9-vvcf

Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer

Priority MEDIUM 57

Contrast through 1.20.0 contains a panic vulnerability in the transit-engine endpoint's ciphertextContainer.UnmarshalJSON function that fails to validate decoded ciphertext length before slicing.

CVSS 4.0MEDIUM 5.3 Network Low privileges No interaction EPSS 0.00177 Published 2026-09-27 No fix listed CWE-129
TI-2026-64971 CVE-2026-100833 · GHSA-mjj6-px65-jq92

Contrast before 1.23.1 Image Substitution via Policy Generation

Priority LOW 39

Contrast (edgelesssys/contrast) versions 1.14.0 before 1.23.1 generate runtime policies that fail to detect all container image substitutions.

CVSS 4.0HIGH 8.6 Network Low privileges No interaction EPSS 0.00234 Published 2026-09-27 Fixed in 1.23.1 CWE-20
TI-2025-43536 CVE-2025-71425 · GHSA-7f88-pr8w-xgw6

Contrast before 1.8.1 Information Disclosure via Logging

Priority LOW 38

Contrast (Edgeless Systems) before 1.8.1 logs the workload secret to stderr, and thus to Kubernetes logs, when the Contrast initializer is configured with CONTRAST_LOG_LEVEL set to info or debug.

CVSS 4.0HIGH 8.5 Adjacent network Low privileges No interaction EPSS 0.0019 Published 2026-09-27 Fixed in 1.8.1 CWE-532
TI-2025-43535 CVE-2025-71424 · GHSA-4585-2273-g8cw

Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount

Priority LOW 22

Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0.

CVSS 4.0MEDIUM 5.1 Adjacent network Low privileges No interaction EPSS 0.00163 Published 2026-09-27 Fixed in 1.9.1 CWE-693