CVE-2025-7445

Kubernetes secrets-store-sync-controller in versions before 0.0.2 discloses service account tokens in logs.

Score

CVSS 3.1 6.5 Medium

Status

Deferred - jordan@liggitt.net

Published

2025-09-05

Last modified

2025-09-05

Weaknesses

CWE-532

Affected products

• Secrets-store-sync-controller (Kubernetes)

References

• https://github.com/kubernetes/kubernetes/issues/133897
• https://groups.google.com/g/kubernetes-security-announce/c/NP7cQvQ1aGA