Go/github.com/kedacore/keda/v2 CVE-2026-77524: unknown, EPSS 0.64%

KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication in github.com/kedacore/keda

Action: Upgrade github.com/kedacore/keda/v2 to 2.21.0 or later.

go get github.com/kedacore/keda/v2@v2.21.0

Affected

Fixed versions

Sources

• osv: GO-2026-6776#Go/github.com/kedacore/keda/v2
• https://github.com/kedacore/keda/security/advisories/GHSA-637c-6jxx-4rwm
• https://nvd.nist.gov/vuln/detail/CVE-2026-77524
• https://github.com/kedacore/keda/commit/1e21cc798dedd079e696cdb45388eddc5e18365d
• https://github.com/kedacore/keda/releases/tag/v2.21.0

CVE-2026-77524 · published 2026-10-19T21:08:35Z · modified 2026-10-19T21:31:49.973645562Z · JSON