CyberSecBulletin

Bank-vaults vulnerabilities

We track 1 vulnerability in Bank-vaults products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on July 31, 2026.

1vulnerabilities
1critical
0high
0exploited
9.6average CVSS score

Latest Bank-vaults vulnerabilities

  • 9.6 Critical severity

    vault-secrets-webhook: Server-Side Request Forgery

    CVE-2026-54725Bank-vaults

    vault-secrets-webhook is a Kubernetes mutating webhook that makes direct secret injection into Pods possible. Prior to 1.23.1, parseVaultConfig() in pkg/webhook/config.go accepts the vault.security.banzaicloud.io/vault-addr annotation, MutateConfigMap and Muta