EUVD-2026-115331Published
kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2026-105769 · CVE overview and exploitation status
cve-program · CVE-2026-105769
- https://github.com/chainguard-forks/kaniko/security/advisories/GHSA-5q7h-w9jf-cx97
- https://github.com/chainguard-forks/kaniko/pull/495
- https://github.com/chainguard-forks/kaniko/releases/tag/v1.25.20
- https://github.com/chrismellard/docker-credential-acr-env/issues/21
- https://pkg.go.dev/vuln/GO-2026-6225
euvd · EUVD-2026-115331
- https://github.com/chainguard-forks/kaniko/security/advisories/GHSA-5q7h-w9jf-cx97
- https://github.com/chainguard-forks/kaniko/pull/495
- https://github.com/chainguard-forks/kaniko/releases/tag/v1.25.20
- https://github.com/chrismellard/docker-credential-acr-env/issues/21
- https://pkg.go.dev/vuln/GO-2026-6225
nvd · CVE-2026-105769
- https://github.com/chainguard-forks/kaniko/pull/495
- https://github.com/chainguard-forks/kaniko/releases/tag/v1.25.20
- https://github.com/chainguard-forks/kaniko/security/advisories/GHSA-5q7h-w9jf-cx97
- https://github.com/chrismellard/docker-credential-acr-env/issues/21
- https://pkg.go.dev/vuln/GO-2026-6225
osv · GHSA-5q7h-w9jf-cx97
- https://github.com/chainguard-forks/kaniko/security/advisories/GHSA-5q7h-w9jf-cx97
- https://nvd.nist.gov/vuln/detail/CVE-2026-105769
- https://github.com/chrismellard/docker-credential-acr-env/issues/21
- https://github.com/chainguard-forks/kaniko/pull/495
- https://github.com/chainguard-forks/kaniko/commit/08de01fe7fffaeb6bc030efa9eae723ea2dd4405
- https://github.com/chainguard-forks/kaniko/commit/58915b22dbeca4d936d6bb51c0c889baf6ebbc48
- https://github.com/chainguard-forks/kaniko
- https://github.com/chainguard-forks/kaniko/releases/tag/v1.25.20
- https://pkg.go.dev/vuln/GO-2026-6225
osv · GO-2026-6902
- https://github.com/chainguard-forks/kaniko/security/advisories/GHSA-5q7h-w9jf-cx97
- https://nvd.nist.gov/vuln/detail/CVE-2026-105769
- https://github.com/chainguard-forks/kaniko/commit/08de01fe7fffaeb6bc030efa9eae723ea2dd4405
- https://github.com/chainguard-forks/kaniko/commit/58915b22dbeca4d936d6bb51c0c889baf6ebbc48
- https://github.com/chainguard-forks/kaniko/pull/495
- https://github.com/chainguard-forks/kaniko/releases/tag/v1.25.20
- https://github.com/chrismellard/docker-credential-acr-env/issues/21
Related changes
Linked by CVE identifier- kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-creden… · Advisory content revised · 7 Nov 2026
- kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts · Newly collected advisory · 5 Nov 2026
- kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts in github.com/chainguard-dev/kaniko · Newly collected advisory · 5 Nov 2026
- kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts · Advisory content revised · 5 Nov 2026
- kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts · Affected-version evidence changed · 2 Nov 2026
- kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts · Newly collected advisory · 2 Nov 2026