CVE-2026-75481

creationtimestamp| type| source ---|---|--- 2026-08-18 05:01:00+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3mtdgq4mur527...

CVE-2026-75481

SkyPilot's service account permission update endpoint lacks authorization checks, letting any authenticated user (PR:L) escalate a newly created service account to admin role and authenticate with its bearer token for full administrative control over all users and workspaces. CVSS 8.8 HIGH. A PoC...