GitHub Advisoryadvisory · Go

GHSA-rp7v-4384-hfrp k8sGPT has Prompt Injection through its k8sGPT-Operator

HIGH Published 2026-04-24 Modified 2026-04-24 Official page ↗
Ecosystem
Go
Packages
github.com/k8sgpt-ai/k8sgpt
Severity
High
CVSS vector
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Weaknesses
CWE-20, CWE-502, CWE-915
Reviewed
2026-04-24

Affected packages

• Go github.com/k8sgpt-ai/k8sgpt: < 0.4.32 → fixed in 0.4.32

Description

Summary In the auto-remediation pipeline, `object_to_execution.go` was deserializing the AI-generated YAML directly into a Deployment object, but there was lack of validation from the original Deployment object. Details This issue was fixed after coordination with Alex Jones. PoC To minimize the impact, the PoC of this vulnerability wasn't released, but was shared with the maintainers.

Related

Weakness · CWE (3)

  • CWE-20 Improper Input Validation weakness
  • CWE-502 Deserialization of Untrusted Data weakness
  • CWE-915 Improperly Controlled Modification of Dynamically-Determined Object Attributes weakness

References