tocsin

CVE-2026-45726

2 advisories.

Go/github.com/siderolabs/omni CVE-2026-45726: high 7.6

Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService

Action: Upgrade github.com/siderolabs/omni to 1.6.6 or later.

go get github.com/siderolabs/omni@v1.6.6
go get github.com/siderolabs/omni@v1.7.3

Affected

introducedfixedlast affected
1.3.01.6.6-
1.7.01.7.3-

Fixed versions

1.6.61.7.3

Sources

CVE-2026-45726 · published · modified · JSON

Go/github.com/siderolabs/omni CVE-2026-45726: unknown

Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService in github.com/siderolabs/omni

Action: Upgrade github.com/siderolabs/omni to 1.6.6 or later.

go get github.com/siderolabs/omni@v1.6.6
go get github.com/siderolabs/omni@v1.7.3

Affected

introducedfixedlast affected
1.3.01.6.6-
1.7.01.7.3-

Fixed versions

1.6.61.7.3

Sources

CVE-2026-45726 · published · modified · JSON