{"cve":"CVE-2025-2786","nvd":{"published":"2025-04-02T11:15:39.300","modified":"2026-09-08T22:17:36.290","status":"Deferred","description":"A flaw was found in Tempo Operator, where it creates a ServiceAccount, ClusterRole, and ClusterRoleBinding when a user deploys a TempoStack or TempoMonolithic instance. This flaw allows a user with full access to their namespace to extract the ServiceAccount token and use it to submit TokenReview and SubjectAccessReview requests, potentially revealing information about other users' permissions. While this does not allow privilege escalation or impersonation, it exposes information that could aid in gathering information for further attacks.","cvss_v4":null,"cvss_v3":{"version":"3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N","score":4.3},"cwes":["CWE-200"],"references":["https://access.redhat.com/errata/RHSA-2025:3607","https://access.redhat.com/errata/RHSA-2025:3740","https://access.redhat.com/security/cve/CVE-2025-2786","https://bugzilla.redhat.com/show_bug.cgi?id=2354811","https://github.com/grafana/tempo-operator/pull/1145"],"products":[],"source":"nvd","synced_at":"2026-10-19T22:00:57.946988208+00:00"},"epss":{"cve":"CVE-2025-2786","score":0.00376,"percentile":0.31592,"date":"2026-10-31"},"kev":null,"osv":[{"id":"GHSA-28gr-56hr-prp6","url":"https://osv.dev/vulnerability/GHSA-28gr-56hr-prp6","summary":"Grafana Tempo Operator Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor","modified":"2026-05-20T19:41:28.400140547Z","packages":[{"ecosystem":"Go","name":"github.com/grafana/tempo-operator","purl":"pkg:golang/github.com/grafana/tempo-operator","ranges":["<0.16.0"],"fixed":["0.16.0"]}]},{"id":"GO-2026-4996","url":"https://osv.dev/vulnerability/GO-2026-4996","summary":"Grafana Tempo Operator Vulnerable to Exposure of Sensitive Information to an Unauthorized Actor in github.com/grafana/tempo-operator","modified":"2026-05-20T19:30:12.970295930Z","packages":[{"ecosystem":"Go","name":"github.com/grafana/tempo-operator","purl":"pkg:golang/github.com/grafana/tempo-operator","ranges":["<0.16.0"],"fixed":["0.16.0"]}]}],"attribution":["This product uses the NVD API but is not endorsed or certified by the NVD.","EPSS scores: FIRST Exploit Prediction Scoring System, https://www.first.org/epss","Known exploited vulnerabilities: CISA Known Exploited Vulnerabilities Catalog, https://www.cisa.gov/known-exploited-vulnerabilities-catalog","Package advisories: OSV (https://osv.dev), from the GitHub Advisory Database, PyPA, Go, RustSec and other ecosystem databases, under CC-BY 4.0 or CC0","CVE records: the CVE Program's CVE List (https://www.cve.org), under its terms of use (https://www.cve.org/Legal/TermsOfUse). CVE is a registered trademark of The MITRE Corporation; this product is not affiliated with the CVE Program."]}