skypilot vulnerabilities
1 known vulnerability in skypilot from Skypilot-org. 1 is rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.
1vulnerabilities
0critical
1high
0exploited
8.8average CVSS score
Latest first
- 8.8 High severity
skypilot: Improper Privilege Management
SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. Attackers can create a service account, escalate it to administrator role, and authenticate with its bearer token to gain a