VendorsExternal Secretsexternal_secrets_operatorany version
Vulnerabilities

External Secrets Operator any version

Ranked by severity, then by exploit likelihood. Click a CVE ID for its full record.

3CVEs
CVE-2026-22822
External Secrets Operator insecurely retrieves secrets through the getSecretKey templating function
Published 2026-01-21 · Modified
9.3EPSS 0.002
CVE-2024-45041
External Secrets Operator vulnerable to privilege escalation
Published 2024-09-09 · Analyzed
8.8EPSS 0.006
CVE-2026-34984
External Secrets Operator has DNS exfiltration via getHostByName in its v2 template engine
Published 2026-04-14 · Analyzed
7.1EPSS 0.004