The vulnerability occurs in Steeltoe.Configuration.Abstractions versions 4.0.0 through 4.1.0, where MySQL or PostgreSQL service bindings that include TLS client credentials are written to temporary files under the operating system's default temporary path. The files are created with permissions 0644 on Linux, meaning all users can read them, and they are never deleted. This allows an attacker who can read the file system to obtain private key material that should be secret, compromising confidentiality of TLS communications. The same key material is stored in /proc/<pid>/environ with stricter permissions, but the temporary file exposure presents a clear audit trail and a lower effort to obtain the secrets. Affected systems are all installations of the Steeltoe.Configuration.Abstractions library between versions 4.0.0 and 4.1.0 inclusive, maintained by SteeltoeOSS. The patch is delivered in version 4.2.0 and removes the insecure handling of key material.

All installations of Steeltoe.Configuration.Abstractions 4.0.0 through 4.1.0 from SteeltoeOSS.

Risk and exploitability assessment: the CVSS score of 4.7 indicates moderate severity. The EPSS score of <1% suggests that the vulnerability is unlikely to be widely exploited in the near term, and it is not listed in CISA's KEV catalog. The likely attack vector is local to the container or host: an attacker with read access to the application's temporary directory can retrieve the keys. The vulnerability does not provide a remote code execution path, but it does enable credential leakage if the environment is not tightly controlled.