Security Advisory

CVE-2026-15467

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2026-08-10 20:44:12

Last updated 2026-08-27 15:06:18

Assigner redhat

CVSS score 8.1

State PUBLISHED

Description

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to arbitrary code execution within the cluster.

← Browse all CVEs View on cve.org ↗