HighVulnerabilityLLM-specific
GHSA-rp7v-4384-hfrp: k8sGPT has Prompt Injection through its k8sGPT-Operator
- Identifier
- GHSA-rp7v-4384-hfrp
- Published
- Record updated
- Affected
- github.com/k8sgpt-ai/k8sgpt < 0.4.32
- Fixed in
- 0.4.32
- released April 22, 2026, 2 days before disclosure
Summary
k8sGPT's auto-remediation pipeline deserializes AI-generated YAML directly into a Deployment object in `object_to_execution.go`, without validating it against the original Deployment object. The issue was fixed after coordination with Alex Jones, and the proof of concept was shared only with the maintainers.
Mitigation
The source does not state a fix yet. Check the original advisory for updates.
Affected packages in the Exposure Registry
Matched by package name and ecosystem. Each entry shows whether the package delegates to a language model and how many tracked packages depend on it.
- github.com/k8sgpt-ai/k8sgptGoLLM dependency since 2023-03-21
Topics
Related items
- LowCVE-2026-123498: Vikunja veans prompt injection through project titles and task contentSimilar attack · NVD/CVE Database
- MediumCVE-2026-124028: mistral.rs delimiter injection allows attacker-chosen tool calls via quoted textSimilar attack · NVD/CVE Database
- MediumCVE-2026-123851: JetBrains Junie GitHub Action prompt injection bypass via HTML encodingSimilar attack · NVD/CVE Database
- InfoDecision Models as Retrieval Gates Against Injection and PollutionSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
- InfoMultimodal-SEA: Benchmarking AI Agent Security under Multimodal Social Engineering AttacksSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)