CVE-2025-24884

Name of the Vulnerable Software and Affected Versions kube-audit-rest versions prior to 1.0.16

Description The issue concerns a simple logger of mutation/creation requests to the k8s API, where the previous values of Kubernetes secrets would have been disclosed in the audit messages if the "full-elastic-stack" example vector configuration was used for a real cluster.

Recommendations For versions prior to 1.0.16, update to version 1.0.16 to fix the issue. As a temporary workaround, replace the existing configuration in the vector "audit-files-json-parser-and-redaction" step with the updated configuration that redacts secret data and removes previously set secret data.