CVE-2026-28406

HighCVSS 8.2

Published: 27/02/2026(UTC)Updated: 15/07/2026(UTC)Translated: 16/07/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.61%

45th percentile - higher than 45% of all known CVEs

Summary

Kaniko versions 1.25.4 through 1.25.9 improperly validate paths when extracting build context archives, allowing file writes outside the destination directory via a tar entry like '../outside.txt'. In environments with registry authentication, this can be chained with Docker credential helpers to achieve code execution within the executor process.

Risk Assessment

An attacker can overwrite critical system files or inject malicious code, leading to container or Kubernetes cluster compromise, data exfiltration, or service disruption.

Recommendation

Immediately upgrade kaniko to version 1.25.10 or later, which uses securejoin for safe path resolution during tar extraction.

Other vulnerabilities in kaniko

CVE-2026-105769Critical
kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-controlled registry host. This is due to an unanchored regular expression in the ACR credential helper that accepts hostnames containing .azurecr.io, .azurecr.cn, .azurecr.de, or .azurecr.us.

Original NVD description (English source)

kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using `filepath.Join(dest, cleanedName)` without enforcing that the final path stays within `dest`. A tar entry like `../outside.txt` escapes the extraction root and writes files outside the destination directory. In environments with registry authentication, this can be chained with docker credential helpers to achieve code execution within the executor process. Version 1.25.10 uses securejoin for path resolution in tar extraction.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS