Back to feed
EUVD-2025-34080 · Published Oct 13, 2025
Omni vulnerable to information leak via API
Impact
Omni might leak sensitive information via an API.
Patches
v1.1.5, v1.0.2 and v1.2.0 contain the patch.
Workarounds
None.
References
None.
Technologies
Siderolabs Omni
Weaknesses
CWE-200
CVSS scores
- v3.18.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
MITRE ATT&CK
InferredWhere this vulnerability fits in an attack
Initial Access
References
Potentially impacted assets
See if this affects your attack surface
