akuity — Vulnerabilities & Security Advisories 5

Akuity provides a GitOps platform for managing Kubernetes deployments and application lifecycles. Historically, its vulnerabilities have included remote code execution, cross-site scripting, and privilege escalation, often stemming from improper input validation and access control flaws. The platform's security posture has been impacted by multiple critical vulnerabilities affecting its API and web interface, with four CVEs documented to date. These issues have allowed unauthorized access, arbitrary code execution, and container escapes in certain configurations. While no major public incidents have been widely reported, the consistent pattern of authentication and input validation vulnerabilities suggests potential attack surfaces remain in its deployment and management components.