SB20260814107 - Credentials exfiltration in HashiCorp Vault Secrets Operator

CSH
CYBERSECURITY HELP
Sign In REGISTER

Main Vulnerability Database SB20260814107

SB20260814107 - Credentials exfiltration in HashiCorp Vault Secrets Operator

Published: August 14, 2026

Security Bulletin ID SB20260814107
CSH Severity
Low
Patch available
YES
Number of vulnerabilities 1
Exploitation vector Remote access
Highest impact Data manipulation

Breakdown by Severity

Low 100%
  • Low
  • Medium
  • High
  • Critical

Description

This security bulletin contains information about 1 vulnerability.


1) Files or Directories Accessible to External Parties (CVE-ID: CVE-2026-8715)

CWE-ID: CWE-552 - Files or Directories Accessible to External Parties

CVSSv4: 7.1 [CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N]


The vulnerability allows a remote user to disclose sensitive information.

The vulnerability exists due to improper access control in the AppRole authentication configuration when processing tenant-supplied spec.appRole.secretIDPath and VaultConnection.spec.address values. A remote user can configure the operator to read an accessible file from the operator pod filesystem and transmit its contents to a tenant-controlled endpoint to disclose sensitive information.

Exploitation requires an authenticated Kubernetes user with create and get permissions on VaultAuth, VaultConnection, and VaultStaticSecret resources in their namespace. The issue can potentially lead to privilege escalation within the cluster.


Remediation

Install update from vendor's website.

References