github.com/external-secrets/external-secrets/apis

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

Medium 4.9

CVE-2026-42876

External Secrets Operator: Privilege escalation with secret overwriting

External Secrets Operator reads information from a third-party service and automatically injects the values as Kubernetes Secrets. Prior to 2.4.1, a user who only has permission to create ExternalSecret resources can cause the operator to create a Secret that…

external-secrets external-secrets github.com/external-secrets/external-secrets/apis Go

May 11, 2026