Unit 42 releases OperTraitor, finds over-privileged Kubernetes operators incl. IBM Prometurbo (CVE-2026-6389) and Datadog Operator
Unit 42 (Palo Alto Networks) released OperTraitor, an open-source, LLM-powered tool that ingests RBAC configurations from installed Kubernetes operators and the OperatorHub catalog. It compares an operator's documented function with its granted privileges and assigns a 1-10 risk score. The research found abandoned, overly permissive opera…