Skip to content
OpenAdvisories

Package · Go

github.com/projectcalico/calicoctl

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.2
    CVE-2026-6720

    Calicoctl leaks cluster credentials to stderr when verbose logging is enabled

    When calicoctl is invoked with --log-level=info or --log-level=debug, the client prints the full contents of its loaded connection-configuration struct to stderr in a single log line. The struct embeds every credential calicoctl uses to talk to the cluster — …

    Tigera Calico Enterprise Calico Calico Cloud Go