VYPR

managed-serviceaccount

by Red Hat

CVEs (1)

  • CVE-2026-75924HigAug 18, 2026
    risk 0.57cvss 8.7epss

    A flaw was found in managed-serviceaccount. A compromised addon-manager pod, due to its ClusterRole granting excessive permissions, can read any secret across all namespaces. Additionally, it can approve arbitrary Certificate Signing Requests (CSRs), which could lead to…