CVE-2025-68476 | kedacore keda up to 2.17.2/2.18.2 Kubernetes-based Event Driven Autoscaling path traversal (GHSA-c4p6-qg4m-9jmr)

Uncategorized

A vulnerability identified as critical has been detected in kedacore keda up to 2.17.2/2.18.2. This affects an unknown part of the component Kubernetes-based Event Driven Autoscaling. This manipulation causes path traversal.

This vulnerability is handled as CVE-2025-68476. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More