{"kind": "product", "path": "vulns/calico", "name": "calico", "product": "calico", "items": [{"id": "CVE-2026-41186", "noindex": false, "published": "2026-07-30T14:45:04.418Z", "modified": "2026-07-30T16:10:53.298Z", "cvss": 6, "cvss_vector": "CVSS:4.0/AV:A/AC:L/AT:P/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L", "severity": "medium", "epss": 0.00666, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-41186", "title": "Unauthenticated Go pprof exposure in Calico debug server", "description": "When Calico's shared debug server is enabled (disabled by default), the Calico kube-controllers and Goldmane components bind their Go pprof debug listener to 0.0.0.0 without authentication. Any pod with network reachability to the listener can retrieve the process heap, goroutine stacks (including function arguments), and command-line arguments. Depending on the process's in-memory state, the heap may contain sensitive material. The debug listener is opt-in but is unsafe when enabled because it offers no authentication and no safe localhost-only binding option.", "references": ["https://github.com/projectcalico/calico/pull/12491", "https://github.com/projectcalico/calico/pull/12634", "https://github.com/projectcalico/calico/pull/12633"], "fixes": ["3.31.6", "3.32.1"], "products": [{"name": "calico", "path": "vulns/calico", "ecosystem": ""}]}, {"id": "CVE-2026-41187", "noindex": false, "published": "2026-07-30T14:45:04.247Z", "modified": "2026-07-30T16:11:27.341Z", "cvss": 6.2, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:L/SA:H", "severity": "medium", "epss": 0.00388, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-41187", "title": "Calico Tier Authorization Bypass via DeleteCollection", "description": "Calico's apiserver wraps tier-scoped resources so that every operation runs through AuthorizeTierOperation, but the Delete override on NetworkPolicy, GlobalNetworkPolicy, and their staged variants is not invoked for DeleteCollection requests. A user holding the deletecollection verb or wildcard verbs on tier-scoped policy resources can bulk-delete policies in tiers they otherwise have no rights on, breaking the tier authorization boundary.", "references": ["https://github.com/projectcalico/calico/pull/12731", "https://github.com/projectcalico/calico/pull/12735", "https://github.com/projectcalico/calico/pull/12736"], "fixes": ["3.31.6", "3.32.1"], "products": [{"name": "calico", "path": "vulns/calico", "ecosystem": ""}]}, {"id": "CVE-2026-6540", "noindex": false, "published": "2026-07-30T14:45:04.068Z", "modified": "2026-07-30T16:12:07.691Z", "cvss": 7.9, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:L", "severity": "high", "epss": 0.00539, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-6540", "title": "L7 policy bypass via unnormalized HTTP path matching", "description": "Calico's Application Layer Policy (disabled by default), which enforces HTTP rules through Dikastes, fails to perform URL path normalization. As a result, HTTP requests using path-traversal segments, encoded slashes, or repeated slashes are not correctly evaluated by Prefix path rules. Dikastes authorizes the request under the permitted prefix while the downstream workload or a fronting proxy normalizes the path and serves the restricted endpoint. An attacker with network access and no special RBAC can potentially reach HTTP endpoints the policy was intended to restrict.", "references": ["https://github.com/projectcalico/calico/pull/12531", "https://github.com/projectcalico/calico/pull/12532", "https://github.com/projectcalico/calico/pull/12533"], "fixes": ["3.31.6"], "products": [{"name": "calico", "path": "vulns/calico", "ecosystem": ""}]}, {"id": "CVE-2026-41185", "noindex": false, "published": "2026-05-28T15:47:42.791Z", "modified": "2026-05-28T17:03:54.074Z", "cvss": 6, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L", "severity": "medium", "epss": 0.00323, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-41185", "title": "ServiceAccount token disclosure via Azure IPAM CNI plugin logs", "description": "When Calico is configured with the Azure IPAM plugin, the Calico CNI binary mutates the incoming CNI configuration to attach subnet information before delegating to the IPAM plugin. After mutating, the Azure IPAM helper logs the entire unmarshaled configuration map (stdinData) at INFO level to /var/log/calico/cni/cni.log on every CNI ADD and DEL invocation — once per pod scheduled or terminated on the node. When the cluster is deployed using token-based Kubernetes authentication, this log entry contains the ServiceAccount token, client key, and certificate authority in plaintext. Any principal with read access to /var/log/calico/cni/cni.log o", "references": ["https://github.com/projectcalico/calico/pull/12502", "https://github.com/projectcalico/calico/pull/12527", "https://github.com/projectcalico/calico/pull/12526"], "fixes": ["3.32.0"], "products": [{"name": "calico", "path": "vulns/calico", "ecosystem": ""}]}, {"id": "CVE-2026-6720", "noindex": false, "published": "2026-05-28T15:47:42.519Z", "modified": "2026-05-28T17:04:11.659Z", "cvss": 7.2, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:H/VI:N/VA:N/SC:H/SI:H/SA:H", "severity": "high", "epss": 0.00224, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-6720", "title": "Calicoctl leaks cluster credentials to stderr when verbose logging is enabled", "description": "When calicoctl is invoked with --log-level=info or --log-level=debug, the client prints the full contents of its loaded connection-configuration struct to stderr in a single log line. The struct embeds every credential calicoctl uses to talk to the cluster — inline kubeconfig (with bearer token), Kubernetes API bearer token, etcd password, and inline PEM-encoded etcd client certificate and key. Any reader of that stderr stream — CI job logs, session-recording archives, shared support-ticket transcripts, or local filesystem viewers on the host that ran calicoctl — can extract these credentials with zero Kubernetes privilege. calicoctl's defaul", "references": ["https://github.com/projectcalico/calico/pull/12535", "https://github.com/projectcalico/calico/pull/12536", "https://github.com/projectcalico/calico/pull/12537"], "fixes": ["3.32.0"], "products": [{"name": "calico", "path": "vulns/calico", "ecosystem": ""}]}, {"id": "CVE-2026-41184", "noindex": false, "published": "2026-05-28T15:47:42.173Z", "modified": "2026-05-28T17:04:36.059Z", "cvss": 6, "cvss_vector": "CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L", "severity": "medium", "epss": 0.00504, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2026-41184", "title": "ServiceAccount token disclosure via install-cni container logs", "description": "In Calico, the install-cni init container logs the rendered CNI configuration to standard output. When the configuration template uses the __SERVICEACCOUNT_TOKEN__ placeholder (Canal/Flannel-Calico deployments), the installer substitutes the live Kubernetes ServiceAccount bearer token before logging, exposing the token to any authenticated user with pods/log permission in the namespace with calico-node. The token holds patch privileges on pods/status, enabling annotation-based attacks against cluster workloads. The default kubeconfig-based authentication path is not affected. This is a direct regression of TTA-2018-001.", "references": ["https://github.com/projectcalico/calico/pull/12502", "https://github.com/projectcalico/calico/pull/12527", "https://github.com/projectcalico/calico/pull/12526"], "fixes": ["3.31.6"], "products": [{"name": "calico", "path": "vulns/calico", "ecosystem": ""}]}, {"id": "CVE-2024-33522", "noindex": false, "published": "2024-04-29T22:19:06.908Z", "modified": "2024-08-02T02:36:04.113Z", "cvss": 6.7, "cvss_vector": "CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H", "severity": "medium", "epss": 0.0022, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2024-33522", "title": "Privilege escalation in Calico CNI install binary", "description": "In vulnerable versions of Calico (v3.27.2 and below), Calico Enterprise (v3.19.0-1, v3.18.1, v3.17.3 and below), and Calico Cloud (v19.2.0 and below), an attacker who has local access to the Kubernetes node, can escalate their privileges by exploiting a vulnerability in the Calico CNI install binary. The issue arises from an incorrect SUID (Set User ID) bit configuration in the binary, combined with the ability to control the input binary, allowing an attacker to execute an arbitrary binary with elevated privileges.\n", "references": ["https://github.com/projectcalico/calico/issues/7981", "https://github.com/projectcalico/calico/pull/8447", "https://github.com/projectcalico/calico/pull/8517"], "fixes": [], "products": [{"name": "calico", "path": "vulns/calico", "ecosystem": ""}]}, {"id": "CVE-2022-28224", "noindex": false, "published": "2022-06-06T17:19:12.810Z", "modified": "2024-09-16T20:31:41.256Z", "cvss": 5.5, "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:N/A:H", "severity": "medium", "epss": 0.00606, "kev": false, "exploits": [], "stacks": [{"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}], "path": "vulns/cve-2022-28224", "title": "Calico and Calico Enterprise may be vulnerable to route hijacking with the floating IP feature", "description": "Clusters using Calico (version 3.22.1 and below), Calico Enterprise (version 3.12.0 and below), may be vulnerable to route hijacking with the floating IP feature. Due to insufficient validation, a privileged attacker may be able to set a floating IP annotation to a pod even if the feature is not enabled. This may allow the attacker to intercept and reroute traffic to their compromised pod.", "references": ["https://www.tigera.io/security-bulletins-tta-2022-001/", "https://nvd.nist.gov/vuln/detail/CVE-2022-28224"], "fixes": [], "products": [{"name": "calico", "path": "vulns/calico", "ecosystem": ""}]}], "total": 8, "unknown_count": 0, "release_unconfirmed": false, "page": 1, "pages": 1, "filtered": false, "noindex": false, "filters": {}, "page_size": 20, "products": [{"name": "calico", "path": "vulns/calico", "ecosystem": ""}], "stacks": [{"name": "system", "path": "vulns/stack/system", "slug": "system"}, {"name": "web", "path": "vulns/stack/web", "slug": "web"}, {"name": "php", "path": "vulns/stack/php", "slug": "php"}, {"name": "python", "path": "vulns/stack/python", "slug": "python"}, {"name": "node", "path": "vulns/stack/node", "slug": "node"}, {"name": "database", "path": "vulns/stack/database", "slug": "database"}, {"name": "containers", "path": "vulns/stack/containers", "slug": "containers"}, {"name": "network", "path": "vulns/stack/network", "slug": "network"}, {"name": "applications", "path": "vulns/stack/applications", "slug": "applications"}], "versions": ["3.32.0", "3.31.6"], "stats": {"recent": 0, "kev": 0}, "lastmod": "2026-07-30T16:12:07.691Z", "early_advisories": [], "license": "Подборку PatchFirst и наши дополнения (приоритеты, ранние предупреждения, тексты, сводки и агрегаты) можно свободно использовать для собственных целей, включая внутренние задачи бизнеса. Перепродажа, коммерческое распространение и массовое зеркалирование этой подборки или дополнений допускаются только по письменному соглашению с оператором. При любом использовании или публикации подборки или наших дополнений указывайте PatchFirst (https://ru.patchfirst.dev/vulns/) с этой ссылкой на страницу ленты своего региона. Исходные записи открытых источников остаются под их лицензиями и условиями. Эти условия не ограничивают ваши права на исходные данные, которые можно получить у источников напрямую.", "terms_url": "https://ru.patchfirst.dev/vulns/#feed-terms", "attribution": {"name": "PatchFirst", "url": "https://ru.patchfirst.dev/vulns/"}, "source_changes": "PatchFirst отбирает, нормализует и объединяет записи; могут добавляться сводки и переводы. Новости указываются ссылкой на первоисточник в самой записи.", "sources": [{"id": "cve", "name": "CVE List / CVE.org", "url": "https://www.cve.org/", "license": "CVE Terms of Use", "terms_url": "https://www.cve.org/Legal/TermsOfUse", "notice": "Copyright © 1999–2021, The MITRE Corporation. LICENSE Submissions : For all materials you submit to the Common Vulnerabilities and Exposures (CVE™), you hereby grant to The MITRE Corporation (MITRE) and all CVE Numbering Authorities (CNAs) a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute such materials and derivative works. Unless required by applicable law or agreed to in writing, you provide such materials on an \"AS IS\" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied, including, without limitation, any warranties or conditions of TITLE, NON-INFRINGEMENT, MERCHANTABILITY, or FITNESS FOR A PARTICULAR PURPOSE. CVE Usage : MITRE hereby grants you a perpetual, worldwide, non-exclusive, no-charge, royalty-free, irrevocable copyright license to reproduce, prepare derivative works of, publicly display, publicly perform, sublicense, and distribute Common Vulnerabilities and Exposures (CVE™). Any copy you make for such purposes is authorized provided that you reproduce MITRE's copyright designation and this license in any such copy. DISCLAIMERS ALL DOCUMENTS AND THE INFORMATION CONTAINED THEREIN PROVIDED BY MITRE ARE PROVIDED ON AN \"AS IS\" BASIS AND THE CONTRIBUTOR, THE ORGANIZATION HE/SHE REPRESENTS OR IS SPONSORED BY (IF ANY), THE MITRE CORPORATION, ITS BOARD OF TRUSTEES, OFFICERS, AGENTS, AND EMPLOYEES, DISCLAIM ALL WARRANTIES, EXPRESS OR IMPLIED, INCLUDING BUT NOT LIMITED TO ANY WARRANTY THAT THE USE OF THE INFORMATION THEREIN WILL NOT INFRINGE ANY RIGHTS OR ANY IMPLIED WARRANTIES OF MERCHANTABILITY OR FITNESS FOR A PARTICULAR PURPOSE."}, {"id": "osv", "name": "OSV", "url": "https://osv.dev/", "terms_url": "https://google.github.io/osv.dev/data/", "terms": "Лицензии исходных баз различаются; см. каталог источников."}, {"id": "kev", "name": "CISA KEV", "url": "https://www.cisa.gov/known-exploited-vulnerabilities-catalog", "license": "CC0-1.0", "terms_url": "https://github.com/cisagov/kev-data/blob/develop/LICENSE"}, {"id": "epss", "name": "FIRST EPSS", "url": "https://www.first.org/epss/", "terms_url": "https://www.first.org/epss/faq", "terms": "Оценки доступны свободно; запрашивается указание источника (FIRST EPSS, оценки подготовлены Empirical Security)."}, {"id": "github-advisory", "name": "GitHub Advisory Database", "url": "https://github.com/advisories", "license": "CC-BY-4.0", "terms_url": "https://github.com/github/advisory-database/blob/main/LICENSE.md"}, {"id": "exploitdb", "name": "Exploit-DB", "url": "https://www.exploit-db.com/", "license": "GPL-2.0", "terms_url": "https://gitlab.com/exploit-database/exploitdb/-/blob/main/LICENSE.md"}, {"id": "metasploit", "name": "Metasploit", "url": "https://github.com/rapid7/metasploit-framework", "license": "BSD-3-Clause", "terms_url": "https://github.com/rapid7/metasploit-framework/blob/master/LICENSE", "notice": "Copyright (c) 2006-2026, Rapid7, Inc.\nLicense: BSD-3-clause\n Redistribution and use in source and binary forms, with or without modification,\n are permitted provided that the following conditions are met:\n .\n * Redistributions of source code must retain the above copyright notice,\n this list of conditions and the following disclaimer.\n .\n * Redistributions in binary form must reproduce the above copyright notice,\n this list of conditions and the following disclaimer in the documentation\n and/or other materials provided with the distribution.\n .\n * Neither the name of Rapid7, Inc. nor the names of its contributors\n may be used to endorse or promote products derived from this software\n without specific prior written permission.\n .\n THIS SOFTWARE IS PROVIDED BY THE COPYRIGHT HOLDERS AND CONTRIBUTORS \"AS IS\" AND\n ANY EXPRESS OR IMPLIED WARRANTIES, INCLUDING, BUT NOT LIMITED TO, THE IMPLIED\n WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE ARE\n DISCLAIMED. IN NO EVENT SHALL THE COPYRIGHT OWNER OR CONTRIBUTORS BE LIABLE FOR\n ANY DIRECT, INDIRECT, INCIDENTAL, SPECIAL, EXEMPLARY, OR CONSEQUENTIAL DAMAGES\n (INCLUDING, BUT NOT LIMITED TO, PROCUREMENT OF SUBSTITUTE GOODS OR SERVICES;\n LOSS OF USE, DATA, OR PROFITS; OR BUSINESS INTERRUPTION) HOWEVER CAUSED AND ON\n ANY THEORY OF LIABILITY, WHETHER IN CONTRACT, STRICT LIABILITY, OR TORT\n (INCLUDING NEGLIGENCE OR OTHERWISE) ARISING IN ANY WAY OUT OF THE USE OF THIS\n SOFTWARE, EVEN IF ADVISED OF THE POSSIBILITY OF SUCH DAMAGE."}, {"id": "nuclei", "name": "Nuclei Templates", "url": "https://github.com/projectdiscovery/nuclei-templates", "license": "MIT", "terms_url": "https://github.com/projectdiscovery/nuclei-templates/blob/main/LICENSE.md", "notice": "MIT License\n\nCopyright (c) 2025 ProjectDiscovery, Inc.\n\nPermission is hereby granted, free of charge, to any person obtaining a copy\nof this software and associated documentation files (the \"Software\"), to deal\nin the Software without restriction, including without limitation the rights\nto use, copy, modify, merge, publish, distribute, sublicense, and/or sell\ncopies of the Software, and to permit persons to whom the Software is\nfurnished to do so, subject to the following conditions:\n\nThe above copyright notice and this permission notice shall be included in all\ncopies or substantial portions of the Software.\n\nTHE SOFTWARE IS PROVIDED \"AS IS\", WITHOUT WARRANTY OF ANY KIND, EXPRESS OR\nIMPLIED, INCLUDING BUT NOT LIMITED TO THE WARRANTIES OF MERCHANTABILITY,\nFITNESS FOR A PARTICULAR PURPOSE AND NONINFRINGEMENT. IN NO EVENT SHALL THE\nAUTHORS OR COPYRIGHT HOLDERS BE LIABLE FOR ANY CLAIM, DAMAGES OR OTHER\nLIABILITY, WHETHER IN AN ACTION OF CONTRACT, TORT OR OTHERWISE, ARISING FROM,\nOUT OF OR IN CONNECTION WITH THE SOFTWARE OR THE USE OR OTHER DEALINGS IN THE\nSOFTWARE."}, {"id": "linux-kernel", "name": "Linux kernel releases", "url": "https://www.kernel.org/", "license": "CC-BY-SA-4.0", "terms_url": "https://www.kernel.org/legal.html", "notice": "Copyright (C) 1997-2014 by The Linux Kernel Organization, Inc."}]}