What is CVE-2025-68476?

CVE-2025-68476 is a security advisory published by Microsoft Security Response Center (MSRC) with High severity. KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential

Which CVE IDs does CVE-2025-68476 cover?

CVE-2025-68476 covers the following CVE IDs: CVE-2025-68476. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

Which products are affected by CVE-2025-68476?

CVE-2025-68476 affects 1 product, including: azl3 keda 2.14.1-7 on Azure Linux 3.0.

CVE-2025-68476High

KEDA has Arbitrary File Read via Insufficient Path Validation in HashiCorp Vault Service Account Credential

Vendor

Microsoft Security Response Center (MSRC)

Published

December 24, 2025

Last Modified

—

🔗 CVE IDs covered (1)

CVE-2025-68476 →

🎯 Affected products1

azl3 keda 2.14.1-7 on Azure Linux 3.0

✅ Remediation

KBCBL-Mariner Releases (Security Update) — fixed build 2.14.1-9

🔗 References (2)

advisoryhttps://msrc.microsoft.com/update-guide/vulnerability/CVE-2025-68476
referencehttps://learn.microsoft.com/en-us/azure/azure-linux/tutorial-azure-linux-upgrade