Логотип exploitDog
Консоль
Логотип exploitDog

exploitDog

github логотип

GHSA-qw34-v3jw-3crv

Опубликовано: 10 авг. 2026
Источник: github
Github: Не прошло ревью
CVSS3: 8.1

Описание

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to arbitrary code execution within the cluster.

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to arbitrary code execution within the cluster.

EPSS

Процентиль: 31%
0.00381
Низкий

8.1 High

CVSS3

Дефекты

CWE-266

Связанные уязвимости

CVSS3: 8.1
redhat
8 дней назад

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to arbitrary code execution within the cluster.

CVSS3: 8.1
nvd
7 дней назад

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to arbitrary code execution within the cluster.

EPSS

Процентиль: 31%
0.00381
Низкий

8.1 High

CVSS3

Дефекты

CWE-266