Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
5.5
cleanstart nodetaint may expose Docker registry credentials
published 4 days ago
Summary
If your Kubernetes cluster runs cleanstart's nodetaint component with a detailed logging setting (level 4 or higher), a specially crafted Docker configuration file can cause the file's contents to be written to the logs. This can reveal secret pull credentials used to access private container registries. Reduce the logging level or apply the latest update to prevent accidental credential leakage.
What to do
- Update cleanstart nodetaint to version 0.0.4-r1.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| CleanStart | cleanstart | nodetaint |
< 0.0.4-r1 Fix: upgrade to 0.0.4-r1
|
Original advisory text
In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secr...
Security vulnerability affects the nodetaint package. In Kubernetes clusters using a logging level of at least 4, processing a malformed docker config file will result in the contents of the docker config file being leaked, which can include pull secrets or other registry credentials.
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit (estimated)
- Gives an attacker partial control (estimated)
Timeline
Published31 Oct 2026
Updated31 Oct 2026
First seen31 Oct 2026
Sources
CLEANSTART-2026-TL98903 · OSV
Track software like this
Free during beta