What’s Vulnerable › Products

edgelesssys contrast vulnerabilities

14 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 14 published in the last 12 months.

Check whether your edgelesssys contrast version is affected

Latest edgelesssys contrast vulnerabilities

• CVE-2026-116197 — Contrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry Selection (CVSS 2.6)
• CVE-2026-109359 — Contrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer Recovery (CVSS 7.7)
• CVE-2026-109358 — Edgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege Escalation (CVSS 7.8)
• CVE-2026-100839 — Contrast before 1.18.0 AML Injection Remote Code Execution (CVSS 8.4)
• CVE-2026-100838 — Contrast before 1.19.1 CopyFile Policy Symlink Subversion (CVSS 8.1)
• CVE-2026-100837 — Edgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix Matching (CVSS 3.7)
• CVE-2026-100836 — Edgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainer (CVSS 4.3)
• CVE-2026-100835 — Contrast before 1.16.0 Remote Attestation Relay Attack (CVSS 7.4)
• CVE-2026-100833 — Contrast before 1.23.1 Image Substitution via Policy Generation (CVSS 9.6)
• CVE-2025-71426 — Contrast before 1.4.1 Coordinator Impersonation via Unauthenticated Recovery (CVSS 7.1)
• CVE-2025-71425 — Contrast before 1.8.1 Information Disclosure via Logging (CVSS 7.3)
• CVE-2025-71424 — Edgeless Systems Contrast before 1.9.1 Insecure Volume Mount (CVSS 3.5)
• CVE-2025-71423 — Edgelesssys Contrast before 1.12.2 Workload Secrets Information Disclosure (CVSS 7.3)
• CVE-2025-71422 — Contrast before 1.12.1 Insecure LUKS2 Persistent Storage (CVSS 5.7)