CVE Vulnerability Catalog

A flaw was found in the Data Science Pipelines Operator (DSPO) where the spec.database.customExtraParams field allows injection of dangerous parameters into the MySQL DSN string. An attacker with namespace editor privileges can enable LOCAL INFILE and exfiltrate sensitive files like the service account token, leading to privilege escalation to cluster-admin.

A flaw was found in the Data Science Pipelines Operator where credentials like MariaDB passwords and MinIO keys are generated using a cryptographically weak PRNG, making them predictable. An unauthenticated attacker with access to the MinIO Route or MariaDB Service can derive these credentials and gain unauthorized access to all pipeline artifacts and metadata.

A flaw was found in the Data Science Pipelines Operator (DSPO) where its ClusterRole grants excessive privileges, including the ability to execute commands in pods and manage cluster-wide roles. If the DSPO pod is compromised, an attacker could leverage these privileges to gain full administrative control over the entire Kubernetes cluster.

A flaw was found in the TrustyAI Service (TAS) deployment that allows any pod on the cluster network to bypass authentication and directly access the TAS backend API. An attacker can read, tamper with, or delete monitoring data and configurations, and inject arbitrary data, potentially disrupting tenant operations.

A flaw was found in the trustyai-service-operator's LMEvalJob controller that allows an authenticated user within the cluster to configure a sidecar container to bypass existing security policies. This enables the execution of untrusted remote code, leading to arbitrary code execution within the cluster.

A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway where improper configuration allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. This includes sensitive information such as access keys, input prompts, and outputs, leading to significant information disclosure and data tampering.

A flaw was found in the UpdateHub firmware-update agent's probe handler that parses JSON metadata from the update server into a fixed two-level nested-array struct. It validates only the outer array length and then dereferences objects[1].objects[0].objects.sha256sum via strlen() without checking that the inner object array is non-empty. A malicious or compromised update server (or a man-in-the-middle when DTLS is disabled) can return a response with an empty inner array, leading to a NULL pointer dereference and a CPU fault, causing a denial of service. The flaw is remotely triggerable and limited to availability.

In Dokploy prior to 0.29.13, sanitizeCommand in compose.ts only trims whitespace and strips surrounding quotes from compose.command before exportEnvCommand and docker command interpolation, allowing an authenticated user who can update a Compose service to inject shell metacharacters and execute arbitrary commands on the Dokploy host. This issue is fixed in version 0.29.13.

In Dokploy prior to 0.29.13, the WebSocket handlers validate organization membership but do not enforce checkServiceAccess, accessedServerIds, or accessedServices, allowing an authenticated organization member to obtain root terminal access and read logs or statistics for restricted servers and services. This issue is fixed in version 0.29.13.

Dokploy prior to 0.29.13 contains a command injection vulnerability in settings.readTraefikFile. A user with traefikFiles.read permission can execute arbitrary commands on a managed server via shell metacharacters in the configPath.

Dokploy prior to 0.29.13 contains a command injection vulnerability in cloneGitRepository. An authenticated user with application access can execute arbitrary OS commands on the Dokploy host by setting a malicious custom Git URL and triggering deployment.

CyberPanel 2.4.3 contains an authenticated command injection vulnerability in the remote backup transfer feature. Attackers can control a remote server's API response and inject malicious commands via a crafted directory name, which bypasses security middleware and is passed unsanitized to the OS command execution function.

CyberPanel 2.4.3 contains an authenticated remote code execution vulnerability in the remote backup feature. Attackers can supply a malicious remote server address, allowing them to write an attacker-controlled public key to /root/.ssh/authorized_keys, granting persistent root access to the host system.

Cachet through 2.4.1 contains a server-side template injection vulnerability in incident template rendering. Authenticated users can create malicious incident templates with Blade directives or Twig filters that execute system commands, achieving remote code execution as the web server process.

Hugging Face Accelerate through 1.14.0 contains a path traversal vulnerability in load_checkpoint_in_model and load_checkpoint_and_dispatch functions that fail to sanitize weight_map entries from sharded checkpoint indexes. Attackers can supply relative paths with ../ sequences or absolute paths to read arbitrary files, or point shard entries at named pipes to cause indefinite blocking and denial of service.

Vault Enterprise's identity entity batch-delete endpoint is vulnerable to a cross-namespace authorization bypass that may allow an authenticated caller in one namespace to permanently delete the storage backing of entities belonging to another namespace. This vulnerability is fixed in Vault Enterprise 2.0.4, 1.21.9, 1.20.14 and 1.19.20.

TBEA TLogger V2.1.0.0B0.0.0.0 contains multiple unauthenticated denial-of-service vulnerabilities in its web server. An unauthenticated remote attacker can invoke specific HTTP endpoints to reboot or reset the device, clear application data, or terminate the web server through a segmentation fault. Additionally, multiple action endpoints process attacker-controlled parameters using unsafe string operations such as sprintf() and strcat() without adequate bounds checking, allowing crafted input to trigger buffer overflows and crash the web server.

TBEA TLogger V2.1.0.0B0.0.0.0 contains an unauthenticated resource exhaustion vulnerability in its web server. An unauthenticated remote attacker can send PUT requests to the /tmp/ endpoint, causing the web server to create persistent files containing attacker-controlled data under /opt/myapp/webserver/. The generated files are not removed because the web server attempts to move them into a non-existent directory. Repeated requests can therefore exhaust available storage and cause a denial-of-service condition.

Dokploy prior to 0.29.13 contains a vulnerability in the unauthenticated /api/providers/github/setup route that trusts gh_init organizationId and userId values from the state parameter and calls createGithub, allowing an attacker to insert a GitHub App provider containing client_secret, webhook_secret, and PEM private key material into another organization.

Dokploy before version 0.29.13 contains a command injection vulnerability in the buildRemoteDocker() function, where the dockerImage value is directly interpolated into a docker pull shell command. An authenticated user with project access can execute arbitrary OS commands on the Dokploy server.