CVE-2024-45041

CVE-2024-45041 is a high-severity vulnerability affecting the External Secrets Operator for Kubernetes, specifically versions prior to 0.10.2. It allows an attacker with low privileges to exploit a misconfigured ClusterRole, enabling them to retrieve all secrets across the cluster, intercept secret update requests, or deny Pod creation/updates. With a CVSS score of 8.8 (HIGH), the vulnerability has a network attack vector and low attack complexity, leading to high impacts on confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion or media coverage.