CVE-2026-75481
SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. Attackers can create a service account, escalate it to administrator role, and authenticate with its bearer token to gain administrative control over all users and workspaces.
Faiblesse
SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. Attackers can create a service account, escalate it to administrator role, and authenticate with its bearer token to gain administrative control over all users and workspaces.
Références
- https://github.com/skypilot-org/skypilot
- https://github.com/skypilot-org/skypilot/blob/master/sky/users/server.py
- https://github.com/skypilot-org/skypilot/commit/8a3e00259cd374e662cd876c037164bcb070f78e
- https://github.com/skypilot-org/skypilot/issues/9846
- https://www.vulncheck.com/advisories/skypilot-authentication-bypass-via-service-account-role-escalation
- https://github.com/skypilot-org/skypilot/issues/9846
Trouvez la faille avant un attaquant.
Connectez-vous avec GitHub et lancez votre premier audit en moins d'une minute. L'offre gratuite ne nécessite aucune carte bancaire.