Insecure permissions in cert-manager v1.14.4 allows attackers to access sensitive data and escalate privileges by obtaining the service account's token.
cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates.
CVSS 3.1HIGH 7.3·Local·Low privileges·No interaction·EPSS 0.00112·Published 2026-07-16·Fixed in 1.19.6, 1.20.3CWE-863
cert-manager adds certificates and certificate issuers as resource types in Kubernetes clusters, and simplifies the process of obtaining, renewing and using those certificates.