Skip to content
OpenAdvisories

Vendor

siderolabs

8 known vulnerabilities.

Products

omni 6 talos 2
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Low 3.3
    CVE-2026-77564

    Talos Linux: Support bundle does not redact registry credentials

    Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and 1.13.3, talosctl support includes the auth field from resources/registryconfigs.cri.talos.dev.yaml and sensitive content from etcfilespecs.files.talos.dev.yaml in genera…

    siderolabs talos github.com/siderolabs/talos Go
  • Low 2.7
    CVE-2026-45723

    Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic

    Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.CreateSchematic in internal/backend/grpc/schematics.go passes the caller-controlled TalosVersion field to imageFactoryClient.OverlaysVersions wi…

    siderolabs omni github.com/siderolabs/omni Go
  • Low 0.5
    CVE-2025-59824

    Omni Wireguard SideroLink potential escape

    Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to version 0.48.0, Omni Wireguard SideroLink has the potential to escape. Omni and each Talos machine establish a peer-to-peer (P2P) SideroLink connection using WireGuard to mutuall…

    siderolabs omni github.com/siderolabs/omni Go