Threats tagged 'ghsa-99cp-g9q7-3p6c'

1 threat

Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.6	EPSS 0.5%	CVE-2026-8715HashiCorp Tooling · Exposed Files or Directories Critical9.6EPSS 0.5%2026-08-13CVE Database V5CVE-2026-8715 Vault Secrets Operator versions 1.3.0 through 1.4.1 contain a vulnerability in the AppRole authentication configuration that allows tenants with limited Kubernetes RBAC permissions to read arbitrary files from the operator pod's filesystem and exfiltrate credentials. This can lead to privilege escalation within the Kubernetes cluster. The issue is fixed in version 1.5.0. EPSS 0.5%Vulnerability CWE-552 #bit-consul-2026-8715 #bitnami	CVE Database V5	2026-08-13

Page 1 of 1