{"vulnerability": "cve-2026-8715", "sightings": [{"uuid": "0d0c7d8b-9da0-4fae-b4aa-5ad705daef3d", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8715", "type": "seen", "source": "https://bsky.app/profile/securityonline.bsky.social/post/3mtgvllear22d", "content": "A Vault Secrets Operator vulnerability, CVE-2026-8715, lets tenants read pod files and gain privilege escalation. Patch to 1.5.0 now.\n\n#HashiCorp #Vault #Kubernetes #CVE #PrivilegeEscalation #CyberSecurity #InfoSec #Vulnerability", "creation_timestamp": "2026-08-19T14:04:52.988283Z"}, {"uuid": "906c1f6a-734f-405d-b363-9bf8aee89ace", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8715", "type": "seen", "source": "https://bsky.app/profile/stackflag.bsky.social/post/3mt4rrn54m62f", "content": "CVE-2026-8715\nThe Vault Secrets Operator, a tool used to manage secrets in Kubernetes, has a security flaw that allows unauthorized access to files on the system. This could potentially lead to sensitive data being stolen or\u2026\n\nToo many irrelevant or confusing CVEs? Use stackflag.com\n\n#CVE #infosec", "creation_timestamp": "2026-08-15T13:30:03.288772Z"}, {"uuid": "0d51241e-c5d9-4366-adba-15ac4d9e7031", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8715", "type": "seen", "source": "https://bsky.app/profile/cve.skyfleet.blue/post/bmhc4hhpcvohy", "content": "CVE-2026-8715 - Vault Secrets Operator vulnerable to arbitrary file read and credential exfiltration via AppRole secretIDPath\nCVE ID : CVE-2026-8715\n \n Published : Aug. 13, 2026, 9:18 p.m. | 54\u00a0minutes ago\n \n Description : Vault Secrets Operator 1.3.0 up to 1.4.1 is vulnerable...", "creation_timestamp": "2026-08-13T22:49:22.707039Z"}, {"uuid": "206c838d-5785-495d-96f7-c0ccc6c827a9", "vulnerability_lookup_origin": "1a89b78e-f703-45f3-bb86-59eb712668bd", "author": "9f56dd64-161d-43a6-b9c3-555944290a09", "vulnerability": "CVE-2026-8715", "type": "seen", "source": "https://bsky.app/profile/infosec.skyfleet.blue/post/bvgieijg7p3al", "content": "[CVE-2026-8715] HashiCorp Vault Secrets Operator 1.3.0-1.4.1: tenant-controlled secretIDPath leaks operator ServiceAccount token (path to cluster-admin)", "creation_timestamp": "2026-08-28T21:29:41.408888Z"}]}