trustyai-explainability vulnerabilities

Products

• trustyai-service-operator 1

Latest trustyai-explainability CVEs

Newest publication first

1. CVE-2026-15063 Trustyai-service-operator: trustyai service operator: gorch port bypass when auth is enabled

   Published 2026-07-08

   Medium·CVSS 6.3 EPSS 0.28%

   A flaw was found in the gorch service template, which is part of the trustyai-service-operator. Even when authentication is enabled, the gorch service exposes unproxied orchestrator and detector metrics ports. This allows any pod on the cluster network to directly access these po...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.