What’s Vulnerable › Products

kedacore keda vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your kedacore keda version is affected

Latest kedacore keda vulnerabilities

• CVE-2026-77524 — KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication (CVSS 9.9)
• CVE-2026-53572 — KEDA: PostgreSQL connection string parameter injection via incomplete whitespace escaping (CVSS 5.9)
• CVE-2025-68476 — KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential (CVSS 8.2)