CVE-2026-41184 json
ServiceAccount token disclosure via install-cni container logs
published 2026-05-28 5 mo ago modified 2026-10-26 14 d ago also EUVD-2026-32931 , GHSA-9p7w-w5q6-mxj3 , GO-2026-5888
- cvss
- 6.5
- version 3.1, NVD
- cisa kev
- Not listed
- not in CISA's catalog
- epss
- 0.5%
- EPSS 0.5% chance of exploitation in 30 days, percentile 43%
- public exploits
- 0
- none known
Summary
In Calico, the install-cni init container logs the rendered CNI configuration to standard output. When the configuration template uses the __SERVICEACCOUNT_TOKEN__ placeholder (Canal/Flannel-Calico deployments), the installer substitutes the live Kubernetes ServiceAccount bearer token before logging, exposing the token to any authenticated user with pods/log permission in the namespace with calico-node. The token holds patch privileges on pods/status, enabling annotation-based attacks against cluster workloads. The default kubeconfig-based authentication path is not affected. This is a direct regression of TTA-2018-001.
Patch / fix
- go github.com/projectcalico/calico 1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f, 3.31.6
- Tigera Calico 3.31.6, 3.32.0
- govulncheck-vulndb openSUSE Leap 16.0 0.0.20260723T184607-160000.1.1
opensuse advisories openSUSE-SU-2026:21483-1
- github.com/projectcalico/calico@0ca653d commit
- github.com/projectcalico/calico@cd73bc2 commit
- github.com/projectcalico/calico@da9ea3a commit
- github.com/projectcalico/calico#12502 pull request
- github.com/projectcalico/calico#12527 pull request
- github.com/projectcalico/calico#12526 pull request
CISA SSVC
- Exploitation
- none
- Automatable
- no
- Technical impact
- partial
- Assessed
- 5 mo ago
Exploit prediction
0.50% chance of exploitation in the next 30 days, higher than 43% of all scored CVEs (FIRST EPSS, 2026-11-08).
CVSS scores
| assigned by | version | score | vector |
|---|---|---|---|
| CNA | 4.0 | 6.0 | CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L |
| GitHub | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
| CNA | 4.0 | 6.0 | CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
| NVD | 3.1 | 6.5 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N |
Affected packages
| ecosystem | package | affected | fixed in |
|---|---|---|---|
| go | github.com/projectcalico/calico | >=2.0.0, <3.31.6 <1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f |
3.31.6 1.11.0-cni-plugin.0.20260417001138-cd73bc2cea0f |
| go | github.com/projectcalico/calico/v3 | all versions |
no fix listed |
Affected products
- Tigera Calico
Classification
- Weakness
-
- CWE-532 Insertion of Sensitive Information into Log File
References
-
github.com
/projectcalico/calico/pull/12502
patch, web, issue-tracking
-
github.com
/projectcalico/calico/pull/12527
patch, web, issue-tracking
-
github.com
/projectcalico/calico/pull/12526
patch, web, issue-tracking
-
github.com
/projectcalico/calico/commit/0ca653db0ae7400ea9fb066daa7f45c902482271
web, patch
-
github.com
/projectcalico/calico/commit/cd73bc2cea0f4989772f2deb93909e7cfac927e0
web, patch
-
github.com
/projectcalico/calico/commit/da9ea3a13927a35e4022b787d17a005b2157d812
web, patch
-
tigera.io
/security-bulletins/tta-2026-001/
vendor-advisory, mitigation
-
nvd.nist.gov
/vuln/detail/CVE-2026-41184
advisory
-
github.com
/projectcalico/calico
package
-
tigera.io
/security-bulletins/tta-2026-001
web
-
github.com
/advisories/GHSA-9p7w-w5q6-mxj3
advisory
Sources
- CVE List CVE-2026-41184
- GitHub Advisory GHSA-9p7w-w5q6-mxj3
- NVD CVE-2026-41184
- OSV GO-2026-5888
Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.
CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.