CVE-2026-77564

LOW 3.3

Talos Linux: Support bundle does not redact registry credentials

CVSS Score

3.3

EPSS Score

0.0%

EPSS Percentile

0th

Talos Linux is a Linux distribution built for Kubernetes deployments. Prior to 1.12.9 and 1.13.3, talosctl support includes the auth field from resources/registryconfigs.cri.talos.dev.yaml and sensitive content from etcfilespecs.files.talos.dev.yaml in generated support bundles instead of marking or redacting those resources. An operator who shares a bundle with an unintended party can therefore disclose private registry authentication parameters, with impact depending on the registry's network exposure and credential privileges. Talos 1.14 and later encrypt support bundles by default, which reduces but does not replace the need for redaction. This issue is fixed in versions 1.12.9 and 1.13.3.

CWE	CWE-312
Vendor	siderolabs
Product	talos
Published	Oct 14, 2026

Stay Ahead of the Next One

Get instant alerts for siderolabs talos

Be the first to know when new low vulnerabilities affecting siderolabs talos are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N

Attack Vector

Local

Attack Complexity

Low

Privileges Required

None

User Interaction

Required

Scope

Unchanged

Confidentiality

Low

Integrity

None

Availability

None

Affected Versions

siderolabs / talos

< 1.12.9 >= 1.13.0, < 1.13.3

References

NVD ↗ CVE.org ↗ EPSS Data ↗