iggyp0pi

https://iggyp0pi.wtf/iggyp0piSecurity research by Igor "iggyp0pi" Stepansky: offensive security, AppSec, cloud & Kubernetes, agentic AI. 2026-11-04T23:47:11+02:00 Igor Stepansky https://iggyp0pi.wtf/ Jekyll © 2026 Igor Stepansky /assets/img/favicons/favicon.ico /assets/img/favicons/favicon-96x96.png Any Key Will Do: SSH Host Key Checks Off by Default in Apache Airflow2026-10-16T10:00:00+03:00 2026-11-04T09:50:17+02:00 https://iggyp0pi.wtf/posts/airflow-ssh-host-key-verification-cve-2026-94134/ Igor Stepansky

Apache Airflow's SSH and SFTP connections skipped host key verification by default, so a worker would accept any server that answered. That hands a machine-in-the-middle the credentials and data of every task. This is CVE-2026-94134 and CVE-2026-94135, and the only warning was a line in a log.

Any User, Any URL: Webhook SSRF in Harbor2026-10-06T10:00:00+03:00 2026-11-04T09:50:17+02:00 https://iggyp0pi.wtf/posts/harbor-webhook-ssrf/ Igor Stepansky

Any registered Harbor user can create a project, and a project admin can point a webhook at any URL, including the cloud metadata endpoint. No validation, no admin needed. This is how a project webhook becomes a direct path to the registry's cloud IAM credentials.

hello, world2026-09-17T20:00:00+03:00 2026-11-03T17:43:37+02:00 https://iggyp0pi.wtf/posts/hello-world/ Igor Stepansky

Why this blog exists, and the two rules every post here follows.

The Model Will Fetch Anything: SSRF in LMDeploy2026-04-21T10:00:00+03:00 2026-11-04T09:50:17+02:00 https://iggyp0pi.wtf/posts/lmdeploy-ssrf-cve-2026-33626/ Igor Stepansky

You give a vision model an image by URL and the server fetches it for you. LMDeploy fetched any URL at all, including the cloud metadata endpoint, with no authentication required. CVE-2026-33626 was hit in the wild about twelve hours after the advisory went public.

When the Guard Makes the Call: SSRF in Kyverno2026-03-30T10:00:00+03:00 2026-11-04T10:15:12+02:00 https://iggyp0pi.wtf/posts/kyverno-ssrf-cve-2026-4789/ Igor Stepansky

Kyverno lets you write cluster policies that make HTTP calls. The call goes out from Kyverno's own pod, with Kyverno's network reach, not yours. CVE-2026-4789 turns a namespace-scoped policy into server-side request forgery against the whole cluster and the cloud metadata service. CVSS 9.8.