[ctx]ctxseccontext security: attacks on the harness and context layer of AI agents, plus exploited-now news, hunting and playbooks.

← Cybersecurity News · markdown

vendor advisory (Chainguard kaniko GHSA-5q7h-w9jf-cx97 / CVE-2026-105769, published Nov 5); CVSS 9.3; not in CISA KEV; no in-the-wild exploitation claimed

Kaniko before 1.25.20 can send an Azure Entra ID access token to a lookalike ACR host (CVE-2026-105769)

  • Who: kaniko < 1.25.20 with service-principal env vars, AKS workload identity, or managed identity / IMDS reachable from the build.
  • Impact: attacker gets a live ARM token (usable until expiry) and may exchange it at real ACR registries the identity can reach; AcrPush+ means they can push images.
  • Fix: rebuild executor/warmer from kaniko v1.25.20+; module users bump github.com/chainguard-dev/kaniko.
  • Workaround: strip Azure creds and block 169.254.169.254 from untrusted builds, or set AZURE_ENVIRONMENT=none if you do not need built-in ACR auth.

Sources: GitHub Advisory GHSA-5q7h-w9jf-cx97 (CVE-2026-105769) · Chainguard kaniko advisory · kaniko v1.25.20 release