CVE-2020-8567: Google Secret Manager Provider For Secret Store Csi Driver

Medium severity, CVSS 6.5. EPSS: 1.4% chance of exploitation in the next 30 days.

Kubernetes Secrets Store CSI Driver Vault Plugin prior to v0.0.6, Azure Plugin prior to v0.0.10, and GCP Plugin prior to v0.2.0 allow an attacker who can create specially-crafted SecretProviderClass objects to write to arbitrary file paths on the host filesystem, including /var/lib/kubelet/pods.

Affected products

• Google Secret Manager Provider For Secret Store Csi Driver: before 0.2.0 (fixed in 0.2.0)
• Hashicorp Vault Provider For Secrets Store Csi Driver: before 0.0.6 (fixed in 0.0.6)
• Microsoft Azure Key Vault Provider For Secrets Store Csi Driver: before 0.0.10 (fixed in 0.0.10)

Published 2021-01-21. Last modified 2026-06-17.