GHSA-rp7v-4384-hfrp
k8sGPT has Prompt Injection through its k8sGPT-Operator
Summary
In the auto-remediation pipeline, object_to_execution.go was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object.
Details
This issue was fixed after coordination with Alex Jones.
PoC
To minimize the impact, the PoC of this vulnerability wasn't released, but was shared with the maintainers.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- Passive
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- High
What each source reports
GitHub Advisories Score used
k8sGPT has Prompt Injection through its k8sGPT-Operator
Summary
In the auto-remediation pipeline, object_to_execution.go was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object.
Details
This issue was fixed after coordination with Alex Jones.
PoC
To minimize the impact, the PoC of this vulnerability wasn't released, but was shared with the maintainers.
- Record
GHSA-rp7v-4384-hfrp- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - Weakness
- CWE-20, CWE-502, CWE-915
- Updated
- 2026-11-02
OSV
k8sGPT has Prompt Injection through its k8sGPT-Operator
Summary
In the auto-remediation pipeline, object_to_execution.go was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object.
Details
This issue was fixed after coordination with Alex Jones.
PoC
To minimize the impact, the PoC of this vulnerability wasn't released, but was shared with the maintainers.
- Record
GHSA-rp7v-4384-hfrp- CVSS 4.0
- 8.7 High
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N - Weakness
- CWE-20, CWE-502, CWE-915
- Updated
- 2026-11-02
OSVGO-2026-5631No score
k8sGPT has Prompt Injection through its k8sGPT-Operator in github.com/k8sgpt-ai/k8sgpt
k8sGPT has Prompt Injection through its k8sGPT-Operator in github.com/k8sgpt-ai/k8sgpt
- Record
GO-2026-5631- Updated
- 2026-11-02
Affected packages
| Package | Affected | Fixed |
|---|---|---|
github.com/k8sgpt-ai/k8sgptGo | before 0.4.32 | 0.4.32 |
History
| Recorded | Changed | Sources |
|---|---|---|
| first indexed | GitHub Advisories, OSV |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
GHSA-rp7v-4384-hfrp is a high vulnerability (CVSS 8.7) in github.com/k8sgpt-ai/k8sgpt, published April 24, 2026. No source lists public exploit code. Fixed in github.com/k8sgpt-ai/k8sgpt 0.4.32.