CVE-2026-108728: Flyte 2.0.1 through 2.0.51 Cleartext Secret Exposure via Admission Webhook
Flyte 2.0.1 through 2.0.51 contains a cleartext secret storage vulnerability that allows users with Pod read access to obtain secrets by reading init container environment variables. The embedded secret manager webhook writes base64-encoded FILE-mounted secret values into the SECRETS environment variable, letting principals without Secret store access decode them from the Pod spec.
Affected Software
Event History
Frequently Asked Questions
Who can retrieve the exposed secret values?
Any principal with permission to read affected Pod specifications can obtain the values, even if that principal does not have access to the Secret store. The values are present in init-container environment variables.
What conditions are required for exploitation?
The affected workload must use FILE-mounted secrets handled by the embedded secret manager webhook, and the attacker needs Pod read access. No user interaction is required.
Are the exposed values encrypted or otherwise protected in the Pod spec?
No. The webhook places base64-encoded secret values in the SECRETS environment variable; base64 encoding is reversible and does not protect the secret.
Which deployments should be treated as affected?
Flyte versions 2.0.1 through 2.0.51 are affected when they use the embedded secret manager webhook with FILE-mounted secrets. Environments where users can read Pod specs are exposed to secret disclosure under those conditions.