CVE-2026-123047

basyx: Eclipse BaSyx Helm Chart: Privilege escalation via plaintext credential storage in ConfigMap

basyx

In Eclipse BaSyx Helm Charts versions 3.0.0-rc.1 to 3.12.1 of the `basyx` chart, deployments with the bundled Keycloak enabled store the passwords of the Keycloak users that the chart creates in cleartext in a Kubernetes ConfigMap. The template `keycloak-init-config.yaml` rendered `keycloak.initialization.users`, including each user's `credentials[].value`, as `users.json` into the persistent ConfigMap ` -basyx-keycloak-init-config`. By default this includes the bootstrap…

5. Nov 2026

Ausgewertete Quellen

• Red Hat
  Red Hat
• NVD
  CVE-2026-123047