CVE-2021-43832

CVE-2021-43832 is a critical improper permissions vulnerability affecting the open-source Spinnaker multi-cloud continuous delivery platform. An unauthenticated attacker with access to the Gate endpoint can create and execute pipelines, potentially leading to remote code execution and unauthorized resource deployment across connected accounts if Role-Based Access Control (RBAC) is not configured. With a CVSS score of 9.8 (CRITICAL), this vulnerability is easily exploitable over the network with low attack complexity, resulting in high impacts to confidentiality, integrity, and availability. There is currently no public exploit code available, nor is there evidence of active exploitation or significant community discussion surrounding this CVE.