k8sgpt-ai/k8sgpt · Security
k8sGPT has Prompt Injection through its k8sGPT-Operator
- GHSA ID
- GHSA-rp7v-4384-hfrp
- Severity
- high
- Published
- Updated
- CVSS v4
- 8.7 · CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Description
Summary
In the auto-remediation pipeline, object_to_execution.go was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object.
Details
This issue was fixed after coordination with Alex Jones.
PoC
To minimize the impact, the PoC of this vulnerability wasn't released, but was shared with the maintainers.
CWEs
- CWE-20 · Improper Input Validation
- CWE-502 · Deserialization of Untrusted Data
- CWE-915 · Improperly Controlled Modification of Dynamically-Determined Object Attributes