Command-Line Credential Exposure in NeuVector Scanner by NeuVector

CVE-2025-67860

What is CVE-2025-67860?

A vulnerability in the NeuVector scanner allows the scanner process to accept registry and controller credentials as command-line arguments. This could unintentionally expose sensitive credentials to local users, thereby posing a significant risk to the integrity and confidentiality of user data. Organizations using this product should promptly review their security practices and ensure that sensitive information is not passed as command-line arguments to mitigate potential exposure.

References