{"id":"GHSA-rp7v-4384-hfrp","aliases":["GO-2026-5631"],"status":"published","title":"k8sGPT has Prompt Injection through its k8sGPT-Operator","description":"### Summary\nIn the auto-remediation pipeline, `object_to_execution.go` was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object.\n\n### Details\nThis issue was fixed after coordination with Alex Jones.\n\n### PoC\nTo minimize the impact, the PoC of this vulnerability wasn't released, but was shared with the maintainers.","severity":{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high","from":"ghsa"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-20","CWE-502","CWE-915"],"published":"2026-04-24T16:37:12Z","modified":"2026-06-25T23:11:47Z","fixes":[{"ecosystem":"Go","package":"github.com/k8sgpt-ai/k8sgpt","fixed_in":["0.4.32"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"Go","package":"github.com/k8sgpt-ai/k8sgpt","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.4.32"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/k8sgpt-ai/k8sgpt","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.4.32"}]}]},{"source":"osv","ecosystem":"Go","package":"github.com/k8sgpt-ai/k8sgpt","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"0.4.32"}]}]}],"references":[{"url":"https://github.com/k8sgpt-ai/k8sgpt/security/advisories/GHSA-rp7v-4384-hfrp","tags":["web","advisory"]},{"url":"https://github.com/advisories/GHSA-rp7v-4384-hfrp"},{"url":"https://github.com/k8sgpt-ai/k8sgpt","tags":["package"]}],"sources":{"ghsa":[{"id":"GHSA-rp7v-4384-hfrp","title":"k8sGPT has Prompt Injection through its k8sGPT-Operator","description":"### Summary\nIn the auto-remediation pipeline, `object_to_execution.go` was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object.\n\n### Details\nThis issue was fixed after coordination with Alex Jones.\n\n### PoC\nTo minimize the impact, the PoC of this vulnerability wasn't released, but was shared with the maintainers.","status":"published","published":"2026-04-24T16:37:12Z","modified":"2026-04-24T16:37:15Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-20","CWE-502","CWE-915"],"updated_at":"2026-11-02T14:39:56.453138Z"}],"osv":[{"id":"GHSA-rp7v-4384-hfrp","title":"k8sGPT has Prompt Injection through its k8sGPT-Operator","description":"### Summary\nIn the auto-remediation pipeline, `object_to_execution.go` was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object.\n\n### Details\nThis issue was fixed after coordination with Alex Jones.\n\n### PoC\nTo minimize the impact, the PoC of this vulnerability wasn't released, but was shared with the maintainers.","status":"published","published":"2026-04-24T16:37:12Z","modified":"2026-06-25T23:11:47.271795463Z","cvss":[{"version":"4.0","score":8.7,"vector":"CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N","level":"high"}],"cwes":["CWE-20","CWE-502","CWE-915"],"updated_at":"2026-11-02T15:46:56.281047Z"},{"id":"GO-2026-5631","title":"k8sGPT has Prompt Injection through its k8sGPT-Operator in github.com/k8sgpt-ai/k8sgpt","description":"k8sGPT has Prompt Injection through its k8sGPT-Operator in github.com/k8sgpt-ai/k8sgpt","status":"published","published":"2026-06-25T22:34:38Z","modified":"2026-06-25T23:01:24.323945065Z","updated_at":"2026-11-02T15:47:02.838915Z"}]}}