CVE-2026-77524

Name of the Vulnerable Software and Affected Versions KEDA versions prior to 2.21.0

Description A namespace administrator can exploit a flaw by creating TriggerAuthentication and ScaledObject resources, setting the hashiCorpVault.address to a tenant-controlled endpoint and selecting Kubernetes authentication without explicit credentials. KEDA then sends the operator pod's projected ServiceAccount token to that endpoint as a Vault login credential. This allows an attacker to obtain the operator's cluster-wide permissions, enabling broad Secret reads and workload or admission-related operations. This issue specifically affects Vault authentication types.

Recommendations Update KEDA to version 2.21.0.