Trustyai-Service-Operator - CraftedSignal Threat Feedhttps://feed.craftedsignal.io/products/trustyai-service-operator/Trending threats, MITRE ATT&CK coverage, and detection metadata. Fed continuously.Hugoenhello@craftedsignal.iohello@craftedsignal.ioMon, 10 Aug 2026 21:37:46 +0000Arbitrary Code Execution in trustyai-service-operator via Sidecar Injectionhttps://feed.craftedsignal.io/briefs/2026-08-trustyai-rce/Mon, 10 Aug 2026 21:37:46 +0000hello@craftedsignal.iohttps://feed.craftedsignal.io/briefs/2026-08-trustyai-rce/An authenticated user within a Kubernetes cluster can exploit the LMEvalJob controller in trustyai-service-operator to bypass security policies via custom sidecar containers, enabling arbitrary code execution.CVE-2026-15467 describes a security flaw within the trustyai-service-operator, specifically affecting the LMEvalJob controller. An authenticated user with existing access to the Kubernetes cluster can manipulate the configuration of the LMEvalJob to inject or configure a sidecar container. By crafting this sidecar configuration, the user can effectively bypass established cluster security policies (such as Pod Security Admissions or Pod Security Policies). This bypass facilitates the execution of arbitrary, untrusted remote code within the context of the cluster, posing a significant risk for lateral movement, data exfiltration, or further compromise of the containerized environment. This vulnerability highlights the importance of restricting access to CRD (Custom Resource Definition) creation and modification in environments utilizing the trustyai-service-operator.

Impact

Successful exploitation allows an authenticated cluster user to escalate privileges and execute arbitrary commands, potentially compromising the integrity and confidentiality of the entire Kubernetes cluster environment. There are no observed victim counts at this time, but the vulnerability affects all deployments utilizing the vulnerable versions of the trustyai-service-operator.

Recommendation

  • Restrict access to the creation and update operations for the LMEvalJob custom resource to trusted administrative users only.
  • Implement and enforce Kubernetes Admission Controllers that validate sidecar container definitions to prevent unauthorized policy bypasses.
  • Patch the trustyai-service-operator to the latest version provided by Red Hat as soon as the security update is available.
  • Monitor Kubernetes audit logs for suspicious modifications to LMEvalJob resources, specifically focusing on fields related to sidecar configuration.
]]>highadvisory