CVE-2024-36533

Volcano v1.8.2 has insecure file permissions that allow attackers to steal the service account token, giving them full access to sensitive data and administrative capabilities. This is a critical flaw that can compromise the entire system.

Improper permission configuration in Volcano v1.8.2 exposes service account credentials, enabling unauthorized token retrieval via local or network access. Successful exploitation grants privilege escalation and unrestricted access to protected resources managed by the service account.