OpenChoreo API: project-scoped users can exec into and read wirelogs of other projects' components

Impact

The exec and wirelogs handlers authorize against the caller-supplied project query parameter instead of the component's own Spec.Owner.ProjectName, so a grant on any one project is accepted as a grant on all of them. A user who legitimately holds exec rights in their own project can run commands inside another project's component pods and read that project's wirelogs, as long as both live in the same namespace. Where OpenChoreo projects are the tenancy boundary on a shared cluster, that is a tenant break: a shell in a neighbouring team's container reaches its service-account token, mounted secrets, model artifacts and whatever that pod sees of the accelerator it holds. Wirelogs access additionally leaks other projects' request and response traffic to a party with no grant on them.

Who can reach it

Any authenticated OpenChoreo user who holds a project-scoped grant on at least one project and can reach the openchoreo-api HTTP endpoint. Authentication is required; no cluster RBAC beyond an ordinary project grant is needed, and the target project can be named freely in the query parameter.

What to do

Upgrade openchoreo-api to 1.1.6 on the 1.1.x line or 1.2.3 on the 1.2.x line and roll the deployment. This is a control-plane component: the fix costs a pod restart of the API, during which exec and wirelogs are briefly unavailable. No node drain, no reboot, and running workloads are untouched. Until the upgrade lands, treat namespace co-location as no isolation at all and audit exec activity across projects that share a namespace.

References

Related entries

• KubeEdge CloudCore: unauthenticated node task status reports let anyone falsify node upgrade resultsCVE-2026-82473 · KubeEdge CloudCore (CloudHub HTTPS server, node task status endpoints)High
• KubeVirt: Path traversal lets a user who can configure KubeVirt read arbitrary host filesCVE-2022-1798 · KubeVirtHigh
• BuildKit: Race between parallel build steps sharing cache mounts with subpathsCVE-2024-23651 · BuildKitHigh
• OpenShift AI Data Science Pipelines Operator: over-broad ClusterRole turns operator compromise into cluster adminCVE-2026-18608 · Red Hat OpenShift AI Data Science Pipelines Operator (ClusterRole)High
• Istio: When JWKS resolution fails, istiod falls back to hardcoded defaults, weakening JWT validationCVE-2026-31837 · IstioHigh
• Firecracker: Out-of-bounds write in the virtio PCI transportCVE-2026-5747 · FirecrackerHigh