CVE-2026-22728
Severity CVSS v4.0:
Pending analysis
Type:
CWE-284
Improper Access Control
Publication date:
26/02/2026
Last modified:
26/02/2026
Description
Bitnami Sealed Secrets is vulnerable to a scope-widening attack during<br />
the secret rotation (/v1/rotate) flow. The rotation handler derives the<br />
sealing scope for the newly encrypted output from untrusted<br />
spec.template.metadata.annotations present in the input SealedSecret.<br />
By submitting a victim SealedSecret to the rotate endpoint with the<br />
annotation sealedsecrets.bitnami.com/cluster-wide=true injected into the<br />
template metadata, a remote attacker can obtain a rotated version of the<br />
secret that is cluster-wide. This bypasses original "strict" or<br />
"namespace-wide" constraints, allowing the attacker to retarget and unseal<br />
the secret in any namespace or under any name to recover the plaintext<br />
credentials.
Impact
Base Score 3.x
4.90
Severity 3.x
MEDIUM