Is CVE-2026-15467 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-15467?

CVE-2026-15467 has a CVSS v3 severity of HIGH (8.1).

Back

CVE-2026-15467

Description

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to arbitrary code execution within the cluster.