Skip to content
Threat Feed
Subscribe

Product

Trustyai-Service-Operator

1 brief RSS
high advisory

Arbitrary Code Execution in trustyai-service-operator via Sidecar Injection

An authenticated user within a Kubernetes cluster can exploit the LMEvalJob controller in trustyai-service-operator to bypass security policies via custom sidecar containers, enabling arbitrary code execution.

trustyai-service-operator
2t 1c