Database/Container, Kubernetes & orchestration
Calico: install-cni logs the rendered CNI config including the substituted service-account token
CVE-2026-41184Container, Kubernetes & orchestrationcurated
Impact
install-cni logs the rendered CNI config including the substituted service-account token
Who can reach it
Anyone with pod-log read access
What to do
Rolling Calico upgrade; rotate the CNI service-account token; scrub logs
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.