skypilot-org CVE debriefs

These pages are published after PatchSiren validates generated defensive summaries against stored public CVE and source evidence.

HIGH skypilot-org CVE published 2026-08-17

CVE-2026-75481

CVE-2026-75481 debrief based on the supplied source corpus. The CVE record was published on 2026-08-17T21:16:50.647Z and has not been modified since then. This vulnerability allows attackers to escalate privileges and gain administrative control over SkyPilot deployments by exploiting service account permission updates. Affected deployments should verify and remediate this vulnerability. The CVE record an [truncated]