-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| github.com/hwameistor/hwameistor | go | <= 0.14.5 | 0.14.6 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from over-permissive RBAC rules in the ClusterRole definition. The original configuration (pre-patch) used:
apiGroups: ['*']resources: ['*']verbs: ['*']
This granted full cluster admin privileges to any entity bound to this role. The commit diff shows these wildcard rules were replaced with granular permissions, confirming they were the root cause. While not traditional code functions, Kubernetes RBAC rules function as authorization mechanisms, making them the vulnerable 'functions' in this context.