Tag
#credential leak
kaniko Azure Token Leak to Lookalike Registries (CVE-2026-105769)
kaniko before 1.25.20 sends the build's Azure Resource Manager token to any registry host containing .azurecr.io, including attacker lookalikes.
Nov 06, 2026