Go/github.com/projectcalico/calicoctl CVE-2026-6720: unknown, EPSS 0.30%
Calico Inserts Sensitive Information into Log File in github.com/projectcalico/calicoctl
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2026-5893
- https://github.com/advisories/GHSA-3m4q-ggcj-j6m4
- https://nvd.nist.gov/vuln/detail/CVE-2026-6720
- https://github.com/projectcalico/calico/commit/12908bb48a5bf8cbab5373f4d532509a30cf9b7f
- https://github.com/projectcalico/calico/commit/8d87eddcb5eb6efc70c09eb0a33d63137359ea70
- https://github.com/projectcalico/calico/commit/ce3ab2b39b5841757cbccf7922c895c47827f562
- https://github.com/projectcalico/calico/pull/12535
- https://github.com/projectcalico/calico/pull/12536
- https://github.com/projectcalico/calico/pull/12537
- https://www.tigera.io/security-bulletins/tta-2026-003
CVE-2026-6720 · published · modified · JSON