Scope Widening Vulnerability in Bitnami Sealed Secrets

CVE-2026-22728

What is CVE-2026-22728?

The Bitnami Sealed Secrets tool is at risk of a scope-widening attack during the secret rotation process. This occurs when an attacker submits a malicious SealedSecret with specific annotations that exploit the way sealing scopes are derived. By injecting the annotation 'sealedsecrets.bitnami.com/cluster-wide=true', an unauthorized user can trigger the rotate endpoint to generate a rotated version of the secret that bypasses intended access constraints. This vulnerability allows attackers to unseal secrets across any namespace, significantly compromising security and exposing plaintext credentials.

References