Kedacore Keda vulnerabilities

1 known vulnerability affecting kedacore/keda.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

HIGH1

Vulnerabilities

Page 1 of 1

CVE-2025-68476HIGHCVSS 8.2fixed in 2.17.3v>= 2.18.0, < 2.18.32025-12-22

CVE-2025-68476 [HIGH] CWE-22 CVE-2025-68476: KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to versions 2.17.3 and 2.18.3, KEDA is a Kubernetes-based Event Driven Autoscaling component. Prior to versions 2.17.3 and 2.18.3, an Arbitrary File Read vulnerability has been identified in KEDA, potentially affecting any KEDA resource that uses TriggerAuthentication to configure HashiCorp Vault authentication. The vulnerability stems from an incorrect or insufficient path validatio