Information Disclosure Vulnerability in Edgelesssys Contrast for Kubernetes

CVE-2025-71423

What is CVE-2025-71423?

Edgelesssys Contrast, a confidential-computing runtime for Kubernetes, contains a vulnerability that allows sensitive workload secrets to be logged in plaintext. This issue affects versions 1.9.0 through 1.12.2, where the initializer logs the full NewMeshCert response containing these secrets to standard output at INFO level. Consequently, any Kubernetes user with permissions to view pod logs can access these secrets, which may facilitate unauthorized access to encrypted storage or Vault integrations, compromising overall system security. The vulnerability represents a regression of a prior issue documented in GHSA-h5f8-crrq-4pw8.

References