Prowler: legacy gcp auth-provider in kubeconfig runs commands on the shared scan worker

Impact

Prowler's kubeconfig validator rejected exec blocks but not the legacy gcp auth-provider with cmd-path and cmd-args, so POST /api/v1/providers/{id}/connection loads attacker-supplied kubeconfig content and the Kubernetes client runs that command through subprocess.Popen on the shared worker. Any low-privilege tenant of a Prowler deployment therefore gets code execution on the worker that scans every other tenant's environment - and that worker holds or can reach the cloud and cluster credentials for all of them. For an operator running Prowler over their Kubernetes GPU clusters, the compromise is not of the scanner but of the credential set the scanner uses, which typically includes broad read access across the fleet.

Who can reach it

Network access to the Prowler API with any authenticated low-privilege account able to add a provider and run a connection test. Execution lands on the shared Celery-style worker, not on the caller's own infrastructure.

What to do

Upgrade to Prowler 5.36.0 and restart the API and worker processes (fix in commit 0b782fc extends the validator to cover the legacy auth-provider path). No configuration workaround is published; restricting who may add Kubernetes providers narrows the caller pool but does not close it. This is a container/daemon restart of the Prowler stack, not a fleet action. On a multi-tenant deployment, rotate the cloud and cluster credentials the workers hold.

References

Related entries

• Ansible automation-controller: provisioning-callback secret leaks to read-only users and X-Forwarded-For is trustedCVE-2026-84474 · Red Hat Ansible Automation Platform automation-controller (provisioning callback)Critical
• Ansible automation-controller: project SCM URL starting with a dash becomes a git --upload-pack command executionCVE-2026-84502 · Red Hat Ansible Automation Platform automation-controller (Project scm_url to git ls-remote)Critical
• Ansible automation-controller: copied workflows keep instance groups, letting a tenant run jobs on the control planeCVE-2026-84719 · Red Hat Ansible Automation Platform automation-controller (workflow deep-copy permission sanitizer)Critical
• GitLab EE: Duo Chat GraphQL subscription leaks Advanced Search config and credentialsCVE-2026-87719 · GitLab EE (Duo Chat GraphQL subscription argument handling)Critical
• GitLab CE/EE: double free parsing a crafted CI/CD regular expression gives code execution on the serverCVE-2026-89078 · GitLab CE/EE (CI/CD config regular-expression parser)Critical
• GitLab CE/EE: integer overflow compiling a crafted CI/CD regular expression gives code execution on the serverCVE-2026-93577 · GitLab CE/EE (CI/CD config regular-expression compiler)Critical