A vulnerability in the trustyai-service-operator's LMEvalJob controller allows an authenticated cluster user to bypass security policies by configuring a sidecar container. This enables execution of untrusted remote code, resulting in arbitrary code execution within the cluster.