security researcher

I build one thing.
I break everything else.

Co-founder and Head of Development at Sefthy, where I lead development and ship the code that turns enterprise grade backup and disaster recovery into something a small team can actually run. Off the clock, I hunt critical vulnerabilities. That’s seven published CVEs so far, a TOP 10 spot on Bugcrowd Italy and a TOP 20 finish on Hack The Box2024.

see my experience see my CVEs
0
CVEs assigned
TOP 0
Bugcrowd Italy / critical
TOP 02024
Hack The Box / global
0
shipping code since
Work

What I do, and where.

I build one product for real, and break plenty of others for sport. The offensive work keeps my own code paranoid in the right places; the building keeps the bug-hunting grounded in what actually ships.

Building products
Full-stack since 2016. At Sefthy I lead development of plug-and-play backup and disaster recovery that brings a downed server back online, in the cloud, in minutes.
Offensive security
Penetration testing, bug bounty and CTF. Seven CVEs assigned, TOP 10 in Italy on Bugcrowd for critical findings, and TOP 20 globally on Hack The Box in 2024. I go for the bugs nobody thinks are exploitable.
Experience
  1. 2025 — Now

    Co-founder & Head of Development · Sefthy

    I lead development of the first fully plug-and-play backup & disaster recovery solution for SMBs — restoring business operations in the cloud, even in the most critical scenarios.

  2. 2021 — 2024

    Software Developer & Security Specialist · Uania

    Full-stack development at an Italian telecom startup: the UaniaShield cybersecurity solution, the devices’ proprietary OS, and all the platforms.

  3. 2016

    Started shipping code professionally.

Signed, sealed, disclosed.

Vulnerabilities with my name on them.

CVE-2026-54745
SSRF + smuggling in Kubeflow Pipelines
Unauthenticated SSRF and HTTP smuggling on the /_proxy/ route, bypassing ENABLE_AUTHZ=true.
CVSS 10.0 · critical
CVE-2026-63631
Cross-tenant takeover of Kubeflow Model Registry
The core server does no auth of its own, and the shipped Istio policy allows any in-mesh pod that presents a token and drops one header — so a co-tenant reads, rewrites, and deletes another tenant’s models.
CVSS 9.9 · critical
CVE-2026-61621
ML engineer to node root in Kubeflow Trainer
A trainjobs.create-only user sets a privileged securityContext and hostPath through RuntimePatches, gaining root on the node and stealing other tenants’ service account tokens.
CVSS 9.9 · critical
CVE-2026-63636
Controller token theft via annotation in Kubeflow Model Registry
The inferenceservice-controller sends its own cluster ServiceAccount token to the unvalidated registry URL a tenant sets in an annotation, leaking a cluster-wide credential and turning the controller into an SSRF proxy.
CVSS 9.6 · critical
CVE-2026-63391
Cross-namespace pod injection in Kubeflow Spark Operator
A duplicate spark.kubernetes.namespace in spec.sparkConf wins last on the spark-submit argv, so the operator launches driver pods under its own identity in namespaces the tenant cannot touch.
CVSS 8.5 · high
CVE-2026-71860
Cross-namespace BOLA in the Model Registry UI backend
The UI BFF runs its access check against one namespace but operates on another, so in internal auth mode a caller scoped to a single namespace reads, plants, and deletes Jobs, Secrets, and ConfigMaps in any namespace the backend can reach.
CVSS 8.4 · high
CVE-2024-51240
Admin to root on OpenWRT LuCI
A flaw in the luci-mod-rpc package lets an admin account escalate to root through the JSON-RPC API.
CVSS 8.0 · high
1 / 3

At Sefthy we're on a mission to democratize enterprise-grade technology for small and medium businesses. When a server dies, it comes back online in the cloud in minutes. One click, no reconfiguration, no sleepless night.

Co-founder & Head of Development · sefthy.com

Have a system worth breaking,
or one worth building?

vito@carolillo.it