SSRF and ServiceAccount token exfiltration in vault-secrets-webhook (CVE-2026-54725)

The vault-secrets-webhook uses the `vault.security.banzaicloud.io/vault-addr` annotation value directly as the Vault server address without validation or allowlisting. During admission review, the webhook synchronously makes outbound HTTP connections to the attacker-supplied address, including cloud IMDS endpoints. Combined with cluster-wide `serviceaccounts/token:create` permissions, an attacker with ConfigMap or Secret create/update rights in a watched namespace can exfiltrate ServiceAccount JWTs and replay them against the real Vault server to access secrets. Public POC available. Affected versions: - <= v1.22.2 We recommend updating to: v1.23.1. CVSS 9.6 · our assessment: act_now Reference: https://github.com/bank-vaults/vault-secrets-webhook/security/advisories/GHSA-r2v3-8gwf-7ghm Details: https://vuln.today/cve/CVE-2026-54725