Go/github.com/siderolabs/talos: high 7.5
Talos Linux has a local privilege escalation from untrusted workloads
Action: Upgrade github.com/siderolabs/talos to 1.12.7 or later.
go get github.com/siderolabs/talos@v1.12.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 1.12.7 | - |
Fixed versions
| 1.12.7 |
Sources
- osv: GHSA-m38g-vww2-mvgx
- https://github.com/siderolabs/talos/security/advisories/GHSA-m38g-vww2-mvgx
- https://nvd.nist.gov/vuln/detail/CVE-2026-31431
- https://github.com/Percivalll/Copy-Fail-CVE-2026-31431-Kubernetes-PoC
- https://github.com/siderolabs/talos
- https://github.com/theori-io/copy-fail-CVE-2026-31431
- https://xint.io/blog/copy-fail-linux-distributions
published · modified · JSON