CVE-2026-32693: Juju has unauthorized access to out-of-scope Kubernetes secrets
Grantee is able to update secret content using the secret-set tool due to broad Kubernetes access policy.
Implications are that it is possible, knowing a Kubernetes secret identifier (e.g. name), to patch without affecting the secret, revealing the value, or, patching while affecting the secrets value.
References
Code Behaviors & Features
Detect and mitigate CVE-2026-32693 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →