KubePi: unauthenticated access to SSO configuration APIs enables panel account takeover

Impact

KubePi is a multi-cluster Kubernetes management panel, so it holds credentials for every cluster attached to it - in a GPU estate that is typically all of them. In versions up to 1.6.15 the SSO configuration endpoints sit on the same public routing boundary as the SSO login and callback endpoints, so reading, creating and updating the global authentication configuration is not restricted to administrators. An unauthorized or low-privileged user can inspect the existing configuration or repoint authentication at an identity provider they control, which under the right conditions yields account takeover or privilege escalation on the panel and therefore administrative reach into the managed clusters. Two secondary problems compound it: the SSO connectivity test works as a server-side request forgery primitive into the management network, and the user list API returns user objects without consistently clearing authentication-related fields.

Who can reach it

Anyone who can reach the KubePi web interface over the network; the affected SSO configuration routes are reachable without administrator authorization, and low-privileged accounts can reach them too.

What to do

Upgrade to KubePi 2.0.0, which carries the fix (commit b62b41f), and restart the panel. This is a major-version jump, so budget for configuration migration rather than treating it as a point release. Until you can move, keep KubePi off any tenant-reachable or internet-reachable network segment, and because the exposure includes reading configuration and user objects, rotate panel credentials and the kubeconfigs it stores.

References

Related entries

• Rancher: Cluster owners, members and even base users retrieve plaintext credentials via the Kubernetes APICVE-2021-36782 · RancherCritical
• Rancher: Insufficiently protected credentials let project members read passwords and API tokensCVE-2021-36783 · RancherCritical
• Argo CD: Improper access control allows a low-privileged user to escalate to Argo CD adminCVE-2022-24768 · Argo CDCritical
• Rancher: Cleartext credential storage lets managed-cluster users read credentialsCVE-2022-43757 · RancherCritical
• Rancher: Standard users manipulate Kubernetes secrets in the local (management) clusterCVE-2023-22647 · RancherCritical
• Rancher: Update-logic failure misconfigures Rancher's admission webhook, disabling the validation that enforcesCVE-2023-22651 · RancherCritical