Lucene search
+L

2 matches found

OSV
OSV
added 2026/05/08 5:24 p.m.12 views

GHSA-FQ7H-9X26-6J22 ExternalSecrets vulnerable to privilege escalation with secret overwriting

ExternalSecrets allows users to craft Service Account tokens for misconfigured Service Accounts in namespaces the users have access to. Impact A user who only has permission to create ExternalSecret resources can cause the operator to create a Secret that Kubernetes will automatically populate wi...

4.9CVSS5.8AI score0.00215EPSS
SaveExploits0References5
Rows per page
Query Builder