CVE-2026-13482

LowCVSS 3.7

Published: 28/06/2026(UTC)Updated: 25/10/2026(UTC)Translated: 30/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.28%

20th percentile - higher than 20% of all known CVEs

Summary

A vulnerability was found in skypilot up to version 0.12.0, affecting the username.encode function in sky/users/server.py of the User ID Handler component. Manipulation leads to use of weak hash, enabling a remote attack with high complexity.

Risk Assessment

An attacker can remotely exploit the weak hash to compromise credential integrity, potentially leading to unauthorized system access.

Recommendation

Immediately update skypilot to the latest version after 0.12.0 and apply a stronger hashing algorithm for user identifiers.

Other vulnerabilities in skypilot

CVE-2026-75481High
SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions. Attackers can create a service account, escalate it to administrator role, and gain administrative control over all users and workspaces.

Original NVD description (English source)

A vulnerability was detected in skypilot-org skypilot up to 0.12.0. Impacted is the function username.encode of the file sky/users/server.py of the component User ID Handler. The manipulation results in use of weak hash. The attack may be performed from remote. This attack is characterized by high complexity. The exploitability is considered difficult. The exploit is now public and may be used. The vendor was contacted early about this disclosure.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS