Beveiligingsadvies

CVE-2026-15467

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-08-10 20:44:12
Laatst bijgewerkt 2026-08-27 15:06:18
Toegewezen door redhat
CVSS-score 8.1
Status PUBLISHED

Beschrijving

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to arbitrary code execution within the cluster.