Gitops - GoKawiil

Security researchers detail GCP privilege-escalation risk in Kubernetes Config Connector

Researchers describe how Google Kubernetes Config Connector (KCC), a GitOps controller used to manage Google Cloud resources from Kubernetes YAML files, can be manipulated through resources like IAMPolicyMember to escalate privileges. Because KCC authenticates to Google Cloud on behalf of developers using its own credentials, a maliciously crafted or overly permissive YAML file applied to a cluster could grant broad access across a Google Cloud organization.

bleepingcomputer.com · 2026-09-23

Strix agent found admin-level GitHub token exposed on Baseten infrastructure

Security firm Strix ran an unauthenticated scan against Baseten's public infrastructure and within 25 minutes uncovered a live GitHub personal access token with admin rights to Baseten's core product repo, GitOps repo, and Homebrew tap. The token, tied to a container image built in March 2023, had gone unnoticed for over three years and still granted read/write access to private customer repositories when discovered in July 2026. Baseten's security team confirmed the issue as critical and rotated the token within a day of disclosure.

strix.ai · 2026-09-15