CVE Catalog
CVE-2026-66016
MediumCVSS 6.7Exploitation Probability (EPSS)
Low risk0.08%
0th percentile - higher than 0% of all known CVEs
Summary
Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users.
Risk Assessment
Exposure of TLS private keys may allow an attacker to impersonate services or intercept encrypted traffic.
Recommendation
It is recommended to ensure TLS private keys are not included in manifests and restrict access to rendered files.
Original NVD description (English source)
Under specific self-hosted Helm configurations, generated TLS private keys may be retained in rendered manifests accessible to highly privileged local users.