CVE-2026-15811

Name of the Vulnerable Software and Affected Versions kronosnet versions prior to 1.35

Description An issue exists in the cryptographic configuration management where the framework fails to zero-out or wipe sensitive memory segments after executing changes. This results in raw encryption keys remaining resident in memory even after the associated structures are freed. A local attacker using memory disclosure techniques can retrieve the active encryption key to decrypt cluster network communications or inject malicious packets, potentially causing severe high-availability cluster instability.

Recommendations Update to a version newer than 1.34.