Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.
CVE-2026-45726 is a low severity vulnerability with a CVSS score of 0.0. No known exploits currently, and patches are available.
Very low probability of exploitation
EPSS predicts the probability of exploitation in the next 30 days based on real-world threat data, complementing CVSS severity scores with actual risk assessment.
Omni supports importing standalone Talos clusters.
During this process, an ImportedClusterSecrets resource is created, which contains the full CA secrets bundle for the cluster being imported.
If these secrets are not rotated by the importing actor, an authenticated Omni user with Reader access can read this resource and gain full access to the Talos, Kubernetes and etcd APIs of the cluster.
Reader is sufficient for the attacker to be able to read an imported cluster's secrets.system:masters, achieving cluster-admin access to the imported cluster entirely outside Omni's control plane.Please cite this page when referencing data from Strobes VI. Proper attribution helps support our vulnerability intelligence research.
This vulnerability was discovered and reported by bugbunny.ai.