Approved changes feed: RSS · Atom
cpe:2.3:a:stackit:iaas_api:*:*:*:*:*:*:*:*part: a version: * update: *
| Vendor | Stackit (61958577-a029-5d36-b513-cd1d0b123efb) |
|---|---|
| Product | Iaas Api (9b4a541a-85e6-5400-8f8b-1c6257a33e9a) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from gcve-enriched-dumps CVE data
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2026-39910 |
vulnerable | 2026-07-29 00:46:19.575975 |
STACKIT IaaS API Privilege Escalation via Service Account Attachment
HIGH (8.8)
STACKIT IaaS API contains a missing authorization check in the PUT servers service-accounts endpoint. An authenticated, low-privileged attacker can attach an arbitrary service account to a virtual machine they control without validation of their permission to use it, then query the Instance Metadata Service (IMDS) to retrieve an OAuth2 token for that service account and act with its privileges. The impact is confined to the attacker’s own project. The STACKIT Identity Provider enforces strict project matching between the target VM and the requested service account during token impersonation, so cross-project and cross-organization exploitation is not possible. Any further access is bounded by the IAM roles already assigned to the targeted service account.
Published: 2026-06-08T16:16:09.469Z
Updated: 2026-10-30T17:12:16.705Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.