CVE-2026-105769

Name of the Vulnerable Software and Affected Versions kaniko versions prior to 1.25.20

Description kaniko may leak a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-controlled registry host. This occurs because the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env uses an unanchored regular expression to identify ACR registries, accepting any hostname containing .azurecr.io, .azurecr.cn, .azurecr.de, or .azurecr.us. When a Dockerfile references an image on a lookalike host via FROM or COPY --from=<image>, the helper obtains a token from the build's Azure identity and sends it via a POST request to https://<host>/oauth2/exchange. An attacker can then use this token to access Azure Resource Manager or exchange it for credentials to any ACR registry accessible by the identity.

Recommendations Update kaniko to version 1.25.20.