CVE-2025-61688 | siderolabs omni up to 1.0.1/1.1.4 API information disclosure (GHSA-77r9-w39m-9xh5)

October 14, 2025 Yanac

A vulnerability identified as problematic has been detected in siderolabs omni up to 1.0.1/1.1.4. The affected element is an unknown function of the component API. The manipulation leads to information disclosure.

This vulnerability is traded as CVE-2025-61688. It is possible to initiate the attack remotely. There is no exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More