KEDA: Privilege escalation from namespace admin to cluster admin via KEDA TriggerAuthentication

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-77524 · Microsoft / collected KEV context

EUVD-2026-101431

GHSA-637c-6jxx-4rwm

GO-2026-6776

cve-program · CVE-2026-77524

• https://github.com/kedacore/keda/security/advisories/GHSA-637c-6jxx-4rwm
• https://github.com/kedacore/keda/commit/1e21cc798dedd079e696cdb45388eddc5e18365d
• https://github.com/kedacore/keda/releases/tag/v2.21.0

euvd · EUVD-2026-101431

• https://github.com/kedacore/keda/security/advisories/GHSA-637c-6jxx-4rwm
• https://github.com/kedacore/keda/commit/1e21cc798dedd079e696cdb45388eddc5e18365d
• https://github.com/kedacore/keda/releases/tag/v2.21.0

nvd · CVE-2026-77524

• https://github.com/kedacore/keda/commit/1e21cc798dedd079e696cdb45388eddc5e18365d
• https://github.com/kedacore/keda/releases/tag/v2.21.0
• https://github.com/kedacore/keda/security/advisories/GHSA-637c-6jxx-4rwm

osv · GHSA-637c-6jxx-4rwm

• https://github.com/kedacore/keda/security/advisories/GHSA-637c-6jxx-4rwm
• https://nvd.nist.gov/vuln/detail/CVE-2026-77524
• https://github.com/kedacore/keda/commit/1e21cc798dedd079e696cdb45388eddc5e18365d
• https://github.com/kedacore/keda
• https://github.com/kedacore/keda/releases/tag/v2.21.0

osv · GO-2026-6776

• https://github.com/kedacore/keda/security/advisories/GHSA-637c-6jxx-4rwm
• https://nvd.nist.gov/vuln/detail/CVE-2026-77524
• https://github.com/kedacore/keda/commit/1e21cc798dedd079e696cdb45388eddc5e18365d
• https://github.com/kedacore/keda/releases/tag/v2.21.0

No related operational record is retained in the current change model.