Sealed Secrets
Approved changes feed: RSS · Atom
cpe:2.3:a:bitnami:sealed-secrets:*:*:*:*:*:*:*:*
part: a version: * update: *
| Vendor | Bitnami (912f172b-74a5-5499-ba7c-0ec38b677587) |
|---|---|
| Product | Sealed Secrets (b9dc828b-41e6-5fe1-b7cd-6df1490f1056) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from gcve-enriched-dumps CVE data |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-22728 |
vulnerable | 2026-06-08 07:51:13.729165 |
sealed-secrets /v1/rotate can widen sealing scope to cluster-wide via attacker-controlled template annotations
MEDIUM (4.9)
Bitnami Sealed Secrets is vulnerable to a scope-widening attack during
the secret rotation (/v1/rotate) flow. The rotation handler derives the
sealing scope for the newly encrypted output from untrusted
spec.template.metadata.annotations present in the input SealedSecret.
By submitting a victim SealedSecret to the rotate endpoint with the
annotation sealedsecrets.bitnami.com/cluster-wide=true injected into the
template metadata, a remote attacker can obtain a rotated version of the
secret that is cluster-wide. This bypasses original "strict" or
"namespace-wide" constraints, allowing the attacker to retarget and unseal
the secret in any namespace or under any name to recover the plaintext
credentials.
Published: 2026-02-26T00:50:00.863Z
Updated: 2026-02-26T15:58:32.372Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.