CVE-2026-15467

Name of the Vulnerable Software and Affected Versions trustyai-service-operator (affected versions not specified)

Description A flaw in the LMEvalJob controller allows an authenticated user within the cluster to bypass security policies by configuring a sidecar container. This bypass enables the execution of untrusted remote code, resulting in arbitrary code execution within the cluster.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.