Cybersecurity
CVE-2026-105769 in Kaniko: Critical Flaw Leaks Microsoft Entra ID Tokens
Kaniko prior to 1.25.20 leaks Microsoft Entra ID tokens to attacker-controlled container registries due to unanchored regex parsing, rated CVSS 9.3.
CVSS 9.3 CRITICALCVE-2026-105769See vendor advisoryNo patch · mitigation
2 min read