CVE-2025-34292

KEDA is a Kubernetes-based Event Driven Autoscaling component. In version 2.20.2 and earlier, a namespace administrator who can create TriggerAuthentication and ScaledObject resources can set hashiCorpVault.address to a tenant-controlled endpoint and select Kubernetes authentication without an explicit credential. KEDA then uses the operator pod's projected ServiceAccount token and sends it to that endpoint as a Vault login credential; the JWT-shape filter from the prior CVE-2025-68476 remediation accepts the operator token because its subject is a Kubernetes ServiceAccount, allowing the attacker to obtain the operator's cluster-wide permissions, including broad Secret reads and workload or admission-related operations.

A vulnerability in the Advanced Malware Protection (AMP) feature of Cisco Secure Email Gateway could allow an unauthenticated, remote attacker to write arbitrary files on the underlying operating system. It is due to improper handling of email attachments when the file reputation service is enabled; an attacker could send an email with a crafted attachment through an affected device, potentially allowing arbitrary file writes and command execution with root privileges.

A Stack-based Buffer Overflow vulnerability in the routing protocol daemon (rpd) of Juniper Networks Junos OS and Junos OS Evolved allows a configured external BGP neighbor to execute arbitrary commands with root privileges via BMP route monitoring.

transcribe2texts through 1.0.6 contains an OS command injection vulnerability. Attackers can supply crafted audioPath values to transcribeAudio(), injecting $() or backtick substitution into the unescaped path passed to child_process.exec(), executing commands with Node.js process privileges.

Whisper-node through 1.1.1 contains an OS command injection vulnerability. Attackers can supply crafted filePath or whisperOptions.language values to whisper(), injecting shell metacharacters or $() substitution into the command string built by createCppCommand() and run via shelljs exec(), executing commands with Node.js process privileges.

@mborne/extract before 0.2.1 contains an OS command injection vulnerability. Attackers can supply shell metacharacters in archivePath or targetDir options passed to extract(), injecting commands into unquoted shelljs exec() strings in the unzip, 7z, tar-bz2 and gz extractors, running them with Node.js process privileges.

doc-recog through 1.1.6 contains an OS command injection vulnerability. Attackers can supply crafted document paths to recog() or tag(), embedding $(...) or backtick command substitution in the file path that DocData._readPDF passes to a shell-based pdftotext exec call, running commands with Node.js process privileges.

pypdftk through 0.5 contains an OS command injection vulnerability in fill_form(), dump_data_fields(), and pdftk_cmd_util() that build shell commands from caller-supplied paths. Attackers controlling pdf_path or out_file can inject shell metacharacters interpreted by subprocess.Popen with shell=True, executing OS commands as the Python process.

webp-converter before 3.0.0 contains an OS command injection vulnerability in src/webpconverter.js helpers that run libwebp binaries via execFile with shell enabled. Attackers controlling file names or option strings passed to cwebp, dwebp, gwebp, or webpmux functions can inject shell metacharacters to execute OS commands as the Node.js process.

git-diff before 2.0.7 contains an OS command injection vulnerability. Attackers can supply crafted strings to the gitDiff API, embedding $(cmd) or backtick substitutions that shelljs.exec evaluates, running commands with Node.js process privileges.