Go/github.com/projectcalico/calicoctl/v3 CVE-2026-6720: high 7.2, EPSS 0.22%

Calico Inserts Sensitive Information into Log File

Action: Upgrade github.com/projectcalico/calicoctl/v3 to 3.31.6 or later.

go get github.com/projectcalico/calicoctl/v3@v3.31.6

Affected

Fixed versions

Sources

• osv: GHSA-3m4q-ggcj-j6m4
• nvd: CVE-2026-6720
• https://github.com/projectcalico/calico/pull/12535
• https://github.com/projectcalico/calico/pull/12536
• https://github.com/projectcalico/calico/pull/12537
• https://github.com/projectcalico/calico/commit/12908bb48a5bf8cbab5373f4d532509a30cf9b7f
• https://github.com/projectcalico/calico/commit/8d87eddcb5eb6efc70c09eb0a33d63137359ea70
• https://github.com/projectcalico/calico/commit/ce3ab2b39b5841757cbccf7922c895c47827f562
• https://github.com/projectcalico/calico
• https://www.tigera.io/security-bulletins/tta-2026-003

CVE-2026-6720 · published 2026-05-28T18:30:32Z · modified 2026-09-10T03:50:45.399486640Z · JSON