What’s Vulnerable › Products

bank-vaults vault-secrets-webhook vulnerabilities

1 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your bank-vaults vault-secrets-webhook version is affected

Latest bank-vaults vault-secrets-webhook vulnerabilities

• CVE-2026-54725 — vault-addr annotation SSRF -- webhook makes outbound HTTP call to attacker URL during admission; vault-serviceaccount enables cluster-wide SA token theft via TokenRequest API (CVSS 9.6)