CVE-2023-2878: Kubernetes Secrets-Store-Csi-Driver

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

Kubernetes secrets-store-csi-driver in versions before 1.3.3 discloses service account tokens in logs.

Affected products

• Kubernetes Secrets-Store-Csi-Driver: before 1.3.3 (fixed in 1.3.3)

Published 2023-06-07. Last modified 2026-06-17.