Executive brief
Omni vulnerable to information leak via API in github.com/siderolabs/omni
Affected products
- Go github.com/siderolabs/omni
Junglewise Threat Intelligence
CVE-2025-61688: GO-2025-4022 - Omni vulnerable to information leak via API in github.com/siderolabs/omni
CVE-2025-61688 · Severity: low · CVSS 3.1 · Published 2025-11-05
Technologies: github.com/siderolabs/omni (Go). Vendors: Go.
Related threats
- Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. From 1.3.0 until 1.6.6 and 1.7.3, importing a standalone Talos clust
- Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and 1.7.3, managementServer.CreateSchematic in intern
- Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. Prior to 1.6.6 and from 1.7.0 until 1.7.3, SAML.getSession in intern
- GO-2025-4021 - Omni is Vulnerable to DoS via Empty Create/Update Resource Requests in github.com/siderolabs/omni
- GO-2025-3979 - Omni Wireguard SideroLink potential escape in github.com/siderolabs/omni