Nixpkgs security tracker

Try the new UI
Login with GitHub

Suggestion detail

Untriaged
Permalink CVE-2026-45723
2.7 LOW
  • CVSS version (CVSS): 3.1
  • Attack Vector (AV): Network (N)
  • Attack Complexity (AC): Low (L)
  • Privileges Required (PR): High (H)
  • User Interaction (UI): None (N)
  • Scope (S): Unchanged (U)
  • Confidentiality (C): Low (L)
  • Integrity (I): None (N)
  • Availability (A): None (N)
  • Modified Attack Vector (MAV): Network (N)
  • Modified Attack Complexity (MAC): Low (L)
  • Modified Privileges Required (MPR): High (H)
  • Modified User Interaction (MUI): None (N)
  • Modified Confidentiality (MC): Low (L)
  • Modified Scope (MS): Unchanged (U)
  • Modified Integrity (MI): None (N)
  • Modified Availability (MA): None (N)
created 3 days, 23 hours ago Activity log
  • Created suggestion 3 days, 23 hours ago
Omni: Operator can traverse image-factory API paths via unsanitized `talos_version` in CreateSchematic

Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.CreateSchematic in internal/backend/grpc/schematics.go passes the caller-controlled TalosVersion field to imageFactoryClient.OverlaysVersions without validating it as a version. An authenticated Operator can submit traversal segments in TalosVersion, and url.URL.JoinPath normalizes them into unintended paths on the configured image-factory host. Omni then issues HTTP GET requests to those paths and reflects error-body content, enabling same-host endpoint probing and possible disclosure of internal diagnostics while preventing redirection to another host or write requests. This issue is fixed in versions 1.6.6 and 1.7.3.

Affected products

omni
  • ==>= 1.7.0, < 1.7.3
  • ==< 1.6.6

Matching in nixpkgs

pkgs.omnix

Nix companion to improve developer experience

  • nixos-unstable -
    • nixos-unstable-small 1.3.2
  • nixos-26.05 -
    • nixos-26.05-small 1.3.2

pkgs.omniwm

MacOS Niri and Hyprland inspired tiling window manager

  • nixos-unstable -
    • nixos-unstable-small 0.6.8

pkgs.omnictl

CLI for the Sidero Omni Kubernetes management platform

  • nixos-unstable -
  • nixos-26.05 -
    • nixos-26.05-small 1.7.3

pkgs.omniorb

Robust high performance CORBA ORB for C++ and Python

  • nixos-unstable -
    • nixos-unstable-small 4.3.4
  • nixos-26.05 -
    • nixos-26.05-small 4.3.3

pkgs.sbomnix

Utilities to help with software supply chain challenges on nix targets

  • nixos-unstable -
    • nixos-unstable-small 1.8.0
  • nixos-26.05 -
    • nixos-26.05-small 1.7.6

pkgs.insomnia

Open-source, cross-platform API client for GraphQL, REST, WebSockets, SSE and gRPC, with Cloud, Local and Git storage

  • nixos-unstable -
  • nixos-26.05 -

pkgs.omnissa-horizon-client

Allows you to connect to your Omnissa Horizon virtual desktop

  • nixos-unstable -
    • nixos-unstable-small 2606
  • nixos-26.05 -
    • nixos-26.05-small 2606

pkgs.gnomeExtensions.omnipanel

OmniPanel is a Multi-Monitor advanced window management solution for productivity, featuring configurable zones for windows, smart auto-placement, and automatic tiling.

  • nixos-unstable -
    • nixos-unstable-small 23

pkgs.haskellPackages.omnicodec

Data encoding and decoding command line utilities

  • nixos-unstable -
    • nixos-unstable-small 0.8
  • nixos-26.05 -
    • nixos-26.05-small 0.8