NVIDIA AIStore Elevated Access Vulnerability in AIS Operator

A vulnerability exists in NVIDIA AIStore within the AIS Operator component, allowing users to gain elevated access to Kubernetes clusters. This issue arises from the ServiceAccount linked to the ClusterRole, and its exploitation could lead to unauthorized information disclosure.

Impact

Exploitation of this vulnerability could result in unauthorized access to Kubernetes cluster resources, potentially allowing for elevated privileges and access to sensitive information.

Remediation

Users can upgrade to NVIDIA AIStore on Kubernetes version 2.3.0 to address this vulnerability. Instructions for downloading this update are available on the NVIDIA AIStore on Kubernetes GitHub page.