Vulnerabilities in edgelesssys
15 resultsCVE-2026-100835CRITICALContrast before 1.16.0 Remote Attestation Relay AttackEPSS 0.3%CVE-2026-100833HIGHContrast before 1.23.1 Image Substitution via Policy GenerationEPSS 0.2%CVE-2026-100838HIGHContrast before 1.19.1 CopyFile Policy Symlink SubversionEPSS 0.2%CVE-2026-100837MEDIUMEdgeless Systems Contrast through 1.20.0 Credential Leak via Registry Suffix MatchingEPSS 0.2%CVE-2025-71423HIGHEdgelesssys Contrast before 1.12.2 Workload Secrets Information DisclosureEPSS 0.2%CVE-2025-71425HIGHContrast before 1.8.1 Information Disclosure via LoggingEPSS 0.2%CVE-2026-100836MEDIUMEdgeless Systems Contrast through 1.20.0 Denial of Service via ciphertextContainerEPSS 0.2%CVE-2025-71424MEDIUMEdgeless Systems Contrast before 1.9.1 Insecure Volume MountEPSS 0.2%CVE-2026-116197LOWContrast 1.21.0 before 1.25.0 Credential Leak via imagepuller Wildcard Registry SelectionEPSS 0.2%CVE-2026-100839HIGHContrast before 1.18.0 AML Injection Remote Code ExecutionEPSS 0.1%CVE-2025-71426HIGHContrast before 1.4.1 Coordinator Impersonation via Unauthenticated RecoveryEPSS 0.1%CVE-2026-109359HIGHContrast 1.8.0 before 1.24.1 Mesh CA Key Cross-Manifest Exposure via Peer RecoveryEPSS 0.1%CVE-2025-58356HIGHConstellation allows insecure use of LUKS2 persistent storage partitionsEPSS 0.1%CVE-2026-109358HIGHEdgeless Systems Contrast 1.8.0 before 1.24.1 World-Writable Containerd Config Privilege EscalationEPSS 0.1%CVE-2025-71422MEDIUMContrast before 1.12.1 Insecure LUKS2 Persistent StorageEPSS 0.1%