CVE-2025-7445: Kubernetes Secrets-Store-Sync-Controller

Medium severity, CVSS 6.5. EPSS: 0.2% chance of exploitation in the next 30 days.

Kubernetes secrets-store-sync-controller in versions before 0.0.2 discloses service account tokens in logs.

Affected products

• Kubernetes Secrets-Store-Sync-Controller: before 0.0.2 (fixed in 0.0.2)

Published 2025-09-05. Last modified 2026-06-17.