Ai Yas

Improper certificate validation in the Kubernetes and VMware integrations allows an Adversary in the Middle (AiTM) attack. The module fails to properly validate TLS certificates when connecting to remote API endpoints, which may enable an attacker to intercept connections and obtain secret tokens or other credentials, potentially leading to unauthorized access to the connected infrastructure.

An OS Command Injection issue exists in the Cloud module, which allows users to manage cloud resources. The module fails to sufficiently sanitize the `Git branch` and `repository URL` values before passing them to shell commands within the Kubernetes integration. This allows an attacker to execute arbitrary operating-system commands as the web-server user. Exploitation requires the Kubernetes submodule to be enabled and configured, Git to be installed on the server, and the attacker to possess permissions to add or edit cloud server templates. Additionally, exploiting the clone path requires the "launch cloud server template" or "launch approved cloud server template" permission.