Skip to content
Edgelesssys Contrast vulnerabilities
-
edgelesssys contrast
Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection
CVE-2026-116197
2.1 Low
-
edgelesssys contrast
Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery
CVE-2026-109359
8.7 High
-
edgelesssys contrast
Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation
CVE-2026-109358
8.5 High
-
edgelesssys contrast
Contrast before 1.16.0 Remote Attestation Relay Attack
CVE-2026-100835
Public exploit
9.1 Critical
-
edgelesssys contrast
Contrast before 1.23.1 Image Substitution via Policy Generation
CVE-2026-100833
Public exploit
8.6 High
-
edgelesssys contrast
Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer
CVE-2026-100836
Fix available
5.3 Medium
-
edgelesssys contrast
Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching
CVE-2026-100837
Fix available
6.3 Medium
-
edgelesssys contrast
Contrast before 1.19.1 CopyFile Policy Symlink Subversion
CVE-2026-100838
Fix available
8.6 High
-
edgelesssys contrast
Contrast before 1.18.0 AML Injection Remote Code Execution
CVE-2026-100839
Fix available
8.4 High
-
edgelesssys contrast
Contrast before 1.12.1 Insecure LUKS2 Persistent Storage
CVE-2025-71422
Fix available
6.9 Medium
-
edgelesssys contrast
Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure
CVE-2025-71423
Fix available
8.5 High
-
edgelesssys contrast
Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount
CVE-2025-71424
Fix available
5.1 Medium
-
edgelesssys contrast
Contrast before 1.8.1 Information Disclosure via Logging
CVE-2025-71425
Fix available
8.5 High
-
edgelesssys contrast
Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery
CVE-2025-71426
Fix available
7.1 High