CVE-2026-26287 | external-secrets External Secrets Operator up to 1.3.1 webhook privileges management

October 6, 2026 Yanac

A vulnerability identified as critical has been detected in external-secrets External Secrets Operator up to 1.3.1. Affected is an unknown function of the component webhook. This manipulation causes improper privilege management.

This vulnerability is registered as CVE-2026-26287. Remote exploitation of the attack is possible. No exploit is available.

You should upgrade the affected component.VulDB Recent EntriesRead More