Vendor
SkyPilot versions through 0.13.1rc1 are vulnerable to a privilege escalation flaw allowing authenticated users to elevate service account roles to administrator, resulting in full platform takeover.