SkyPilot instance accessible to anyone in the workspace with corrupted user_hash
Author: SerbCCreated May 15, 2026Updated Sep 16, 2026
LabelsStale
Summary
A stray % character was accidentally written into ~/.sky/user_hash, producing a malformed user identity. Instances launched under that bad hash were accessible to anyone in the workspace rather than being scoped to the owning user.
To fix:
- Overwrite
~/.sky/user_hashwith the correct UUID sky downthe bad-hash instances.- Launch a new instance under the corrected user_hash
Expected Behavior
The new instance is owned by and accessible only to the user whose user_hash matches the corrected value.
Source: skypilot-org/skypilot