Siderolabs

7 CVEs across 3 Siderolabs products. Browse Siderolabs vulnerabilities, severities, and proof-of-concept exploits.

Siderolabs products with known CVEs

ProductCVEs
Omni6
Talos1
Talos Linux1
Siderolabs CVEs — newest first
CVESeverityScorePublishedSummary
CVE-2026-45726High7.62026-09-17Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1.6.6 and 1.7.3, importing a standalone Talos cluster creates an Impor…
CVE-2026-45723Low2.72026-09-17Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.CreateSchematic in internal/backend/grpc/sch…
CVE-2026-45720High7.02026-09-17Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and from 1.7.0 until 1.7.3, SAML.getSession in internal/pkg/auth/interce…
CVE-2025-61688High8.62025-10-13Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, Omni might leak sensitive information via an API.
CVE-2025-59836Medium5.32025-10-13Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.1.5 and 1.0.2, there is a nil pointer dereference vulnerability in the Omni…
CVE-2025-59824Medium5.42025-09-24Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to version 0.48.0, Omni Wireguard SideroLink has the potential to escape. Omni an…
CVE-2022-36103High7.22022-09-13Talos Linux is a Linux distribution built for Kubernetes deployments. Talos worker nodes use a join token to get accepted into the Talos cluster. Due to improp…