Go/github.com/kedacore/keda/v2 CVE-2026-77524: critical 9.9

KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication

Action: Upgrade github.com/kedacore/keda/v2 to 2.21.0 or later.

go get github.com/kedacore/keda/v2@v2.21.0

Affected

Fixed versions

Sources

• osv: GHSA-637c-6jxx-4rwm#Go/github.com/kedacore/keda/v2
• https://github.com/kedacore/keda/security/advisories/GHSA-637c-6jxx-4rwm
• https://nvd.nist.gov/vuln/detail/CVE-2026-77524
• https://github.com/kedacore/keda/commit/1e21cc798dedd079e696cdb45388eddc5e18365d
• https://github.com/kedacore/keda
• https://github.com/kedacore/keda/releases/tag/v2.21.0

CVE-2026-77524 · published 2026-10-15T20:19:42Z · modified 2026-10-19T21:40:44.489356801Z · JSON