CVE-2026-83495

A flaw in the Trainer v2 TrainJob API allows users with permission to create TrainJobs to perform namespace secret exfiltration . By injecting valueFrom.secretKeyRef into environment variable definitions, an attacker can read sensitive secrets when the TrainJob Role-Based Access Control (RBAC) is...