CVE-2026-25538

Devtron is an open source tool integration platform for Kubernetes. In version 2.0.0 and prior, a vulnerability exists in Devtron's Attributes API interface, allowing any authenticated user including low-privileged CI/CD Developers to obtain the global API Token signing key by accessing the...

CVE-2026-25538

creationtimestamp| type| source ---|---|--- 2026-02-04 07:15:37+00:00| published-proof-of-concept| https://github.com/devtron-labs/devtron/security/advisories/GHSA-8wpc-j9q9-j5m2...