CVE-2026-105769 - kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts
CVE ID :CVE-2026-105769 Published : Nov. 2, 2026, 4:49 p.m. | 14 minutes ago Description :kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper...