Connected evidence
Follow a shared identifier, source page or planning group across source records. Dates show chronology; a connection does not establish cause, a shared rollout or applicability to your environment.
kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts
Lead record- Why these records are connected
- Records explicitly naming the same CVE identifier.
- Connection key
cve:CVE-2026-105769- Public snapshot refreshed
- today 19:39 UTC
- Distinct source events
- 6
- Source records represented
- 6
Current snapshot membership is shown here. Source histories and cited revisions remain on each record. Future source targets are labelled separately from observed changes. Browse connections.
Evidence in chronological order
- Mon 2 Nov · Dated source evidence · Affected-version evidence changed kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hostsCVE-2026-105769 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Affected-version evidence changed; observed by ChangeIntel, not the original publication date.
- Mon 2 Nov · Dated source evidence · Newly collected advisory kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hostsCVE-2026-105769 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Newly collected advisory; observed by ChangeIntel, not the original publication date.
- Thu 5 Nov · Dated source evidence · Newly collected advisory kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hostsGHSA-5q7h-w9jf-cx97 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Newly collected advisory; observed by ChangeIntel, not the original publication date.
- Thu 5 Nov · Dated source evidence · Advisory content revised kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hostsGHSA-5q7h-w9jf-cx97 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.
- Thu 5 Nov · Dated source evidence · Newly collected advisory kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts in github.com/chainguard-dev/kanikoGO-2026-6902 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Newly collected advisory; observed by ChangeIntel, not the original publication date.
- Sat 7 Nov · Dated source evidence · Advisory content revised kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-creden…EUVD-2026-115331 Source: Derived from the linked evidence · source check: not recorded hereYour review: not selected in your watchlist or stack; no review is inferred.Advisory content revised; observed by ChangeIntel, not the original publication date.