CyberRota Analysis
AI-GeneratedOpenCost versions prior to 1.121.0 are vulnerable due to a lack of authentication on the GET /helmValues endpoint, which exposes sensitive cloud provider credentials in the HELM_VALUES environment variable. Furthermore, the adminAuthMiddleware allows unauthenticated access when the ADMIN_TOKEN is unset, enabling attackers to modify GCP service account keys through the POST /serviceKey endpoint, potentially redirecting billing calls. Organizations using OpenCost should prioritize patching this vulnerability to protect against unauthorized access and credential exposure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
OpenCost before 1.121.0 fails to authenticate the GET /helmValues endpoint, exposing base64-decoded HELM_VALUES environment variable containing cloud provider credentials. Additionally, adminAuthMiddleware fails open when ADMIN_TOKEN is unset, allowing unauthenticated attackers to modify GCP service account keys via POST /serviceKey to redirect billing calls.