203 matches found
PT-2026-78734
In Splunk Enterprise 10.4 versions below 10.4.2, an unauthenticated user could read Prometheus service metrics from the Edge Processor SPL2 Preview sidecar, including service details that expose relevant runtime and build metadata for the sidecar. The vulnerability does not affect Splunk Enterpri...
GO-2026-5046 vulnerabilities
Vulnerabilities for packages: dapr, opentelemetry-collector-contrib, splunk-otel-collector, bento...
CVE-2026-15467 Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to...
EUVD-2026-55809
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to...
CVE-2026-15467
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to...
CVE-2026-15467
Trustyai-service-operator vulnerability CVE-2026-15467 affects the LMEvalJob controller. An authenticated cluster user can abuse a sidecar container to bypass environment-variable filtering and security policies, enabling remote code execution within the cluster. CVSS 3.1 base score 8.1 (HIGH) wi...
CVE-2026-15467 Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to...
CVE-2026-15467
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to...
PT-2026-69952
Name of the Vulnerable Software and Affected Versions trustyai-service-operator affected versions not specified Description A flaw in the LMEvalJob controller allows an authenticated user within the cluster to bypass security policies by configuring a sidecar container. This bypass enables the...
CVE-2026-15467: Incorrect Privilege Assignment
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to...
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: airflow, kserve, openstack-glance-2025.1, openstack-nova-2026.1, openstack-placement-2025.1, openstack-tempest-2025.1, prefect, ansible-operator, azureml-inference-server-http, py3-cassandra-medusa, tritonserver-backend-vllm-cuda-13.0, mcp-atlassian,...
CVE-2026-69247 vulnerabilities
Vulnerabilities for packages: airflow, kserve, openstack-glance-2025.1, openstack-nova-2026.1, openstack-placement-2025.1, openstack-tempest-2025.1, prefect, ansible-operator, azureml-inference-server-http, py3-cassandra-medusa, tritonserver-backend-vllm-cuda-13.0, mcp-atlassian,...
CVE-2026-69247 vulnerabilities
Vulnerabilities for packages: open-webui, semgrep, mitmproxy, airflow, mlflow, datadog-agent, kserve, in-toto, py3-cassandra-medusa, ggshield, superset, kubeflow-volumes-web-app, kubeflow, mycli, k8s-sidecar, dask-kubernetes...
GHSA-G6CJ-PR64-35W5 vulnerabilities
Vulnerabilities for packages: open-webui, semgrep, mitmproxy, airflow, mlflow, datadog-agent, kserve, in-toto, py3-cassandra-medusa, ggshield, superset, kubeflow-volumes-web-app, kubeflow, mycli, k8s-sidecar, dask-kubernetes...
CLEANSTART-2026-BC05591 Security fixes in k8s-sidecar 2.4.0-r0
Package k8s-sidecar version 2.4.0-r0 fixes 10 vulnerabilities: CVE-2026-44431, CVE-2026-44432, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-3219...
CLEANSTART-2026-RQ52450 Security fixes in k8s-sidecar 2.6.0-r0
Package k8s-sidecar version 2.6.0-r0 fixes 10 vulnerabilities: CVE-2026-44431, CVE-2026-44432, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-3219...
CLEANSTART-2026-MO39403 Security fixes in k8s-sidecar 2.4.0-r1
Package k8s-sidecar version 2.4.0-r1 fixes 2 vulnerabilities: CVE-2026-8643, ghsa-537c-gmf6-5ccf...
CLEANSTART-2026-KS40314 Security fixes in k8s-sidecar 1.25.2-r1
Package k8s-sidecar version 1.25.2-r1 fixes 12 vulnerabilities: CVE-2026-44431, CVE-2026-44432, ghsa-mf9v-mfxr-j63j, ghsa-qccp-gfcp-xxvc, CVE-2026-3219...