Vulnerabilities

TI-2026-74325 CVE-2026-77524 · GHSA-637c-6jxx-4rwm

Privilege escalation in KEDA lets namespace admins gain cluster admin

HIGH 76

KEDA is a Kubernetes-based Event Driven Autoscaling component.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00602 Published 2026-10-14 Partial fix · 2.21.0 CWE-269

TI-2026-38635 CVE-2026-53572 · GHSA-6w3m-4hhp-775q

MEDIUM 60

KEDA is a Kubernetes-based Event Driven Autoscaling component.

CVSS 3.1MEDIUM 5.9 Network Low privileges No interaction EPSS 0.00386 Published 2026-08-21 Fixed in 2.20.0 CWE-74

TI-2025-42006 CVE-2025-68476 · GHSA-c4p6-qg4m-9jmr

MEDIUM 43

KEDA is a Kubernetes-based Event Driven Autoscaling component.

CVSS 4.0HIGH 8.2 Network High privileges No interaction EPSS 0.00626 Published 2025-12-22 Partial fix · 2.17.3, 2.18.3 CWE-22