CVE Daily – KEDA (High+Critical) https://cvedaily.com/pages/tags/keda.html CVE Daily – KEDA (High+Critical) en Wed, 03 Jun 2026 21:27:03 +0000 [High] CVE-2025-68476 – KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to versions... https://nvd.nist.gov/vuln/detail/CVE-2025-68476 https://nvd.nist.gov/vuln/detail/CVE-2025-68476 Mon, 22 Dec 2025 22:16:09 +0000 High CVE-2025-68476

KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to versions 2.17.3 and 2.18.3, an Arbitrary File Read vulnerability has been identified in KEDA, potentially affecting any KEDA resource that uses TriggerAuthentication to configure HashiCorp Vault authentication. The vulnerability stems from an incorrect or insufficient path validation when loading the Service Account Token spe…

CVSS: 8.2 · CWE: CWE-22

View on NVD

]]>