The vulnerability in skypilot-org skypilot arises from a failure to properly validate whether authenticated users have the right to grant administrator roles during updates to service account permissions. Exploiting this flaw, an attacker can create a service account, escalate its privileges to administrator, and then use its bearer token to authenticate with full administrative control over all users and workspaces within the system. This privilege escalation vulnerability has a CVSS 4.0 score of 8.7, indicating high severity.

Successful exploitation allows an attacker with authenticated access to escalate privileges to administrator level, gaining full administrative control over all users and workspaces in the affected skypilot environment. This could lead to unauthorized access, modification, or disruption of critical resources managed by skypilot.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict authenticated user permissions to minimize the risk of privilege escalation and monitor for suspicious privilege changes related to service accounts.