CVE-2026-77524 | kedacore KEDA up to 2.20.2 Vault Authentication hashiCorpVault.address privileges management

October 14, 2026 Yanac

A vulnerability, which was classified as very critical, was found in kedacore KEDA up to 2.20.2. Impacted is an unknown function of the component Vault Authentication. Such manipulation of the argument hashiCorpVault.address leads to improper privilege management.

This vulnerability is listed as CVE-2026-77524. The attack may be performed from remote. There is no available exploit.

You should upgrade the affected component.VulDB Recent EntriesRead More