Summary
Vault Kubernetes authentication reads the configured projected service account token path with an unbounded file read. A large file at that path can cause excessive memory use in the operator before token validation runs.

Expected fix
Reject non-regular files and enforce a small maximum read size before validating the service account token.