PT-2026-80401

Published

2026-08-18

·

Updated

2026-08-18

Description by

Score
N/A
Not available

No severity ratings or metrics are available. When they are, we'll update the corresponding info on the page.

vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API in github.com/bank-vaults/vault-secrets-webhook
Vendors
Affected products
Related identifiers
GO-2026-6160
Found an issue in the description? Have something to add? Feel free to write us 👾
dbugs@ptsecurity.com