eBPF String Injection Vulnerability in Inspektor Gadget Tools by Inspektor Gadget

CVE-2026-25996

What is CVE-2026-25996?

The Inspektor Gadget tools, designed for data collection and system inspection on Kubernetes clusters and Linux hosts leveraging eBPF, expose a vulnerability where string fields from eBPF events are outputted to the terminal without proper sanitization. This lack of sanitization allows malicious payloads to introduce control characters and ANSI escape sequences, which could manipulate the display for operators who interact with the terminal, potentially leading to information disclosure or operational disruptions.

References