SkyPilot Privilege Escalation Vulnerability (CVE-2026-75481)

SkyPilot versions through 0.13.1rc1 are affected by a critical privilege management vulnerability, identified as CVE-2026-75481. The flaw resides in the service account management logic, specifically within the sky/users/server.py module, where the application fails to perform authorization checks when a user attempts to update the permissions of a service account.

An authenticated attacker can leverage this oversight to create a new service account and subsequently elevate that account's permissions to the administrator level. By obtaining a bearer token for the newly escalated service account, the attacker can impersonate an administrator to gain full control over all user workspaces and platform configurations. Given the potential for complete administrative compromise of the SkyPilot instance, this vulnerability is rated as High severity.

Attack Chain

1. Attacker authenticates to the target SkyPilot instance as a standard user.
2. Attacker invokes the service account creation API endpoint to provision a new, low-privileged service account.
3. Attacker identifies the API request responsible for updating service account permissions.
4. Attacker sends a crafted request to the permission update endpoint, targeting the newly created service account.
5. The application backend fails to validate that the requesting user possesses administrative privileges before processing the role elevation request.
6. Attacker confirms the service account role has been elevated to 'administrator' status.
7. Attacker requests a bearer token associated with the elevated service account.
8. Attacker utilizes the administrator-level bearer token to perform unauthorized administrative actions across all workspaces.

Impact

Successful exploitation of CVE-2026-75481 grants an attacker full administrative control over a SkyPilot environment. This includes the ability to modify, delete, or inspect any user workspace, potentially leading to widespread data exfiltration, service disruption, and unauthorized compute resource consumption. The impact is significant for multi-tenant or team-based environments relying on SkyPilot for workload orchestration.

Recommendation

1. Upgrade SkyPilot to version 0.13.2 or later immediately to include the patch for CVE-2026-75481.
2. Audit existing service accounts for unauthorized administrative privileges using current platform logs.
3. Revoke any bearer tokens associated with service accounts created or modified within the last 30 days if unauthorized activity is suspected.
4. Monitor web server logs for requests to service account management endpoints originating from non-administrator user accounts.