Skypilot-org vulnerabilities
We track 1 vulnerability in Skypilot-org products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on August 17, 2026.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest Skypilot-org vulnerabilities
- 8.8 High severity
skypilot: Improper Privilege Management
SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. Attackers can create a service account, escalate it to administrator role, and authenticate with its bearer token to gain a