CVE-2026-53572
Description
KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to 2.20.0, pkg/scalers/postgresql_scaler.go constructs libpq-style connection strings from tenant-controlled host, port, userName, dbName, sslmode, and password values, while escapePostgreConnectionParameter() only quotes values containing a literal space. Tabs, newlines, carriage returns, form feeds, vertical tabs, quotes, and backslashes can therefore create additional key-value tokens when pgx parses the string. An attacker able to create or modify a TriggerAuthentication or ScaledObject can inject host or sslmode parameters, redirect the database connection to an attacker-controlled server, expose credentials, or disable intended TLS protection. This issue is fixed in version 2.20.0.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected packages
Versions sourced from the GitHub Security Advisory.
| Package | Affected versions | Patched versions |
|---|---|---|
github.com/kedacore/keda/v2Go | < 2.20.0 | 2.20.0 |
Affected products
26- osv-coords25 versionspkg:apk/chainguard/keda-http-add-on-scalerpkg:apk/chainguard/keda-http-add-on-interceptorpkg:apk/chainguard/keda-http-add-on-operatorpkg:apk/chainguard/kserve-localmodelnode-agent-fipspkg:apk/chainguard/kserve-managerpkg:apk/chainguard/kserve-manager-fipspkg:apk/chainguard/kserve-routerpkg:apk/wolfi/k8sgptpkg:apk/chainguard/keda-2.19-metrics-apiserverpkg:apk/chainguard/kserve-localmodelnode-agentpkg:apk/wolfi/kserve-agentpkg:apk/chainguard/keda-http-add-on-interceptor-fipspkg:apk/chainguard/keda-http-add-on-scaler-fipspkg:apk/wolfi/kserve-routerpkg:apk/chainguard/kserve-localmodelpkg:apk/wolfi/kserve-localmodelpkg:apk/wolfi/kserve-managerpkg:apk/chainguard/keda-http-add-on-operator-fipspkg:apk/chainguard/kserve-agentpkg:apk/chainguard/kserve-agent-fipspkg:apk/chainguard/verticadb-operatorpkg:apk/wolfi/keda-2.19-metrics-apiserverpkg:apk/wolfi/verticadb-operatorpkg:rpm/opensuse/govulncheck-vulndb&distro=openSUSE%20Leap%2016.0pkg:apk/chainguard/k8sgpt
< 0.15.0-r1+ 24 more
- (no CPE)range: < 0.15.0-r1
- (no CPE)range: < 0.15.0-r1
- (no CPE)range: < 0.15.0-r1
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0.15.0-r4
- (no CPE)range: < 0.15.0-r4
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0.15.0-r4
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0
- (no CPE)range: < 0.0.20260723T184607-160000.1.1
- (no CPE)range: < 0
Patches
Vulnerability mechanics
References
6- github.com/advisories/GHSA-6w3m-4hhp-775qghsaADVISORY
- github.com/kedacore/keda/security/advisories/GHSA-6w3m-4hhp-775qnvdWEB
- github.com/kedacore/keda/commit/703de9dec86cb25b6ecfa4948880a90487344d3fnvd
- github.com/kedacore/keda/issues/7784nvd
- github.com/kedacore/keda/pull/7787nvd
- github.com/kedacore/keda/releases/tag/v2.20.0nvd
News mentions
0No linked articles in our index yet.