skypilot-org

Records2All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

skypilot-org records in CISA KEV

No skypilot-org vulnerabilities are listed in CISA KEV.

2 records

TI-2026-52865 CVE-2026-75481 · GHSA-9fgc-w437-4h52

HIGH 73

SkyPilot fails to validate that authenticated users are entitled to grant administrator roles when updating service account permissions.

CVSS 4.0HIGH 8.7 Network Low privileges No interaction EPSS 0.0036 Published 2026-08-17 No fix listed CWE-269

TI-2026-11408 CVE-2026-13482 · GHSA-mh3f-459p-p84f

LOW 28

A vulnerability was detected in skypilot-org skypilot up to 0.12.0.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.00281 Published 2026-06-28 No fix listed CWE-327