CVE-2026-33381 — Users can generate Service Account tokens after permissions removal
When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose ac…
Published: 2026-05-13 · CVSS: 5.9 · CVSS 3.1
When a user's access to mint tokens for a service account is revoked, it is sometimes still possible to do so for a few seconds after the event. The user will eventually lose access to do this.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7