Vulnerabilities

Filters

1 selected

8 records

Sort

Vendor: siderolabs Clear all filters

TI-2026-74326 CVE-2026-77564 · GHSA-7cxh-94cf-mfp6

Talos Linux support bundles include unredacted registry credentials

LOW 15

Talos Linux is a Linux distribution built for Kubernetes deployments.

CVSS 3.1LOW 3.3 Local No auth User interaction EPSS 0.00131 Published 2026-10-14 Fixed in 1.12.9, 1.13.3 +1 CWE-312

TI-2026-33459 CVE-2026-45720 · GHSA-5x9f-6vg5-qg4m

Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token

LOW 32

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud.

CVSS 3.1HIGH 7.0 Local No auth User interaction EPSS 0.00143 Published 2026-09-17 Fixed in 1.6.6, 1.7.3 CWE-294

TI-2026-33462 CVE-2026-45723 · GHSA-c66c-vq6w-fvh5

Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic

LOW 14

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud.

CVSS 3.1LOW 2.7 Network High privileges No interaction EPSS 0.00494 Published 2026-09-17 Fixed in 1.6.6, 1.7.3 CWE-20

TI-2026-33464 CVE-2026-45726 · GHSA-wv8c-6mx2-xf4j

Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService

LOW 34

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud.

CVSS 3.1HIGH 7.6 Adjacent network Low privileges User interaction EPSS 0.00139 Published 2026-09-17 Fixed in 1.6.6, 1.7.3 CWE-200

TI-2025-38119 CVE-2025-61688 · GHSA-77r9-w39m-9xh5

Omni leaks information via the API

MEDIUM 43

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud.

CVSS 3.1HIGH 8.6 Network No auth No interaction EPSS 0.00312 Published 2025-10-13 Fixed in 1.1.5, 1.0.2 CWE-200

TI-2025-37275 CVE-2025-59836 · GHSA-4p3p-cr38-v5xp

Omni is Vulnerable to DoS via Empty Create/Update Resource Requests

HIGH 72

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00582 Published 2025-10-13 Fixed in 1.1.5, 1.0.2 CWE-476

TI-2025-37263 CVE-2025-59824 · GHSA-hqrf-67pm-wgfq

Omni Wireguard SideroLink potential escape

LOW 4

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud.

CVSS 4.0LOW 0.5 Network High privileges No interaction EPSS 0.00205 Published 2025-09-24 Fixed in 0.48.0 CWE-863

TI-2022-16526 CVE-2022-36103 · GHSA-7hgc-php5-77qq

Talos worker join token can be used to get elevated access level to the Talos API

MEDIUM 41

Talos Linux is a Linux distribution built for Kubernetes deployments.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00709 Published 2022-09-13 Fixed in 1.2.2 CWE-732