PT-2026-114288 · Go+2 · Github.Com/Talos-Systems/Talos+1

CVE-2026-77564

·

Published

2026-10-14

·

Updated

2026-10-15

CVSS v3.1

3.3

Low

VectorAV:L/AC:L/PR:N/UI:R/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions Talos Linux versions prior to 1.12.9 Talos Linux versions prior to 1.13.3
Description In talosctl support, the auth field from resources/registryconfigs.cri.talos.dev.yaml and sensitive content from etcfilespecs.files.talos.dev.yaml are included in generated support bundles without being marked or redacted. This can lead to the disclosure of private registry authentication parameters if a bundle is shared with an unauthorized party.
Recommendations Update Talos Linux to version 1.12.9. Update Talos Linux to version 1.13.3.

Exploit

Fix

Cleartext Storage of Sensitive Information

Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com

Weakness Enumeration

CWE-312

Related Identifiers

CVE-2026-77564
GHSA-7CXH-94CF-MFP6

Affected Products

Github.Com/Talos-Systems/Talos
Talos