Files or Directories Accessible to External Parties in Vault Secrets Operator - CVE-2026-8715
Published: August 14, 2026
Vulnerability details
The vulnerability allows a remote user to disclose sensitive information.
The vulnerability exists due to improper access control in the AppRole authentication configuration when processing tenant-supplied spec.appRole.secretIDPath and VaultConnection.spec.address values. A remote user can configure the operator to read an accessible file from the operator pod filesystem and transmit its contents to a tenant-controlled endpoint to disclose sensitive information.
Exploitation requires an authenticated Kubernetes user with create and get permissions on VaultAuth, VaultConnection, and VaultStaticSecret resources in their namespace. The issue can potentially lead to privilege escalation within the cluster.