What’s Vulnerable › Products

siderolabs omni vulnerabilities

6 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 6 published in the last 12 months.

Check whether your siderolabs omni version is affected

Latest siderolabs omni vulnerabilities

• CVE-2026-45726 — Omni: Reader-level users can retrieve imported cluster CA keys via ResourceService (CVSS 7.6)
• CVE-2026-45723 — Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic (CVSS 2.7)
• CVE-2026-45720 — Omni: TOCTOU race condition allows multiple concurrent uses of a single-use SAML session token (CVSS 7.0)
• CVE-2025-61688 — Omni leaks information via the API (CVSS 7.5)
• CVE-2025-59836 — Omni is Vulnerable to DoS via Empty Create/Update Resource Requests (CVSS 7.5)
• CVE-2025-59824 — Omni Wireguard SideroLink potential escape (CVSS 5.4)