Description (CNA)
STACKIT IaaS API contains a missing authorization check vulnerability that allows authenticated, low-privileged attackers to escalate privileges to full organization compromise by attaching arbitrary service accounts to virtual machines they control. Attackers can exploit the unvalidated PUT servers service-accounts endpoint to attach high-privileged service accounts and query the Instance Metadata Service to retrieve OAuth2 tokens, bypassing tenant boundaries and gaining unauthorized control over the entire organization environment.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| STACKIT / IaaS API | affected 0 before 2026-05-28 |
CWE
CWE-862
References
- https://status.stackit.cloud
- https://www.vulncheck.com/advisories/stackit-iaas-api-privilege-escalation-via-service-account-attachment
ADP enrichment
No English description supplied.
No references supplied.