Skip to content
Threat Feed
Subscribe

Vendor

Contrast

3 briefs RSS
high advisory

Improper Verification Vulnerability in Contrast Coordinator Peer Recovery

Contrast versions 1.8.0 through 1.24.0 are vulnerable to an improper verification flaw in the Coordinator peer recovery process that allows manifest history replay and potential Mesh CA key disclosure.

Contrast
1c
high advisory

CVE-2026-100839: AML Injection Vulnerability in Contrast Runtime

Contrast versions before 1.18.0 are vulnerable to an AML injection attack (BadAML), allowing a malicious host to execute arbitrary code within the guest kernel on AMD SEV-SNP confidential computing platforms.

Metal-QEMU-SNP +1 confidential-computing kernel vulnerability virtualization
1t 1c
high advisory

Improper Seed Verification in Contrast Kubernetes Confidential-Computing Runtime

A vulnerability in the Contrast confidential-computing runtime allows attackers to impersonate a legitimate Coordinator by supplying a malicious seed during recovery, leading to the potential recovery of workload secrets.

PoC Contrast +1 kubernetes confidential-computing cve vulnerability attestation aTLS CVE-2026-100835
1t 2c updated