trustyai-service-operator vulnerabilities

A flaw was found in the trustyai-service-operator's LMEvalJob controller that allows an authenticated user within the cluster to configure a sidecar container to bypass existing security policies. This enables the execution of untrusted remote code, leading to arbitrary code execution within the cluster.

A flaw was found in the gorch service template, part of the trustyai-service-operator. Even when authentication is enabled, the gorch service exposes unproxied orchestrator and detector metrics ports, allowing any pod on the cluster network to directly access these ports, bypassing the kube-rbac-proxy and its authentication mechanisms.

A flaw in the TrustyAI Service Operator allows unauthenticated access to communication channels when deploying services like gorch or NemoGuardrails with a specific security setting disabled. This enables other programs within the cluster to access AI guardrails and orchestrator without proper authorization.