EUVD-2026-36099
GHSA-v455-mv2v-5g92
Severity by source
AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Primary rating from Vendor (GitHub_M).
CVSS VectorNVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Lifecycle Timeline
4DescriptionNVD
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's Container Executor path lets a tenant supply Function.spec.podspec directly; the executor merges it into the executor-built podspec and creates a Deployment whose pods run the user's container image. This issue has been patched in version 1.24.0.
Articles & Coverage 2
AnalysisAI
Privilege escalation in Fission (Kubernetes-native serverless framework) prior to version 1.24.0 allows a tenant with Function CRUD permissions to supply an arbitrary Function.spec.podspec that the Container Executor merges into the executor-built podspec, resulting in a Deployment whose pods can break the container sandbox and reach node or cluster level. No public exploit identified at time of analysis, but the upstream fix (PR #3391) explicitly enumerates host namespaces, privileged contexts, hostPath mounts, service account overrides, and dangerous Linux capabilities as the abused fields. CVSS 9.9 with scope change (S:C) reflects that a low-privilege tenant can pivot beyond its own RBAC boundary.
Technical ContextAI
Fission is an open-source Kubernetes-native FaaS platform that schedules user functions into pods managed by a fission-executor service account. The Container Executor code path accepts a user-supplied PodSpec on the Function custom resource and merges it into the executor's own PodSpec before creating a Deployment. Because the executor service account holds the authority to create Deployments and Pods, any tenant-controlled PodSpec field that crosses the sandbox boundary - HostNetwork, HostPID, HostIPC, ServiceAccountName (and its deprecated alias DeprecatedServiceAccount), Volumes[].HostPath, SecurityContext.Privileged, AllowPrivilegeEscalation, and dangerous capabilities such as SYS_ADMIN, NET_ADMIN, SYS_PTRACE, SYS_MODULE, DAC_READ_SEARCH, and DAC_OVERRIDE - becomes a privilege escalation primitive. This maps to CWE-269 (Improper Privilege Management): the trust boundary between a Function-CRUD tenant and the executor's cluster-level RBAC was not enforced.
RemediationAI
Vendor-released patch: upgrade Fission to version 1.24.0 or later (https://github.com/fission/fission/releases/tag/v1.24.0), which introduces the ValidatePodSpecSafety function (pkg/apis/core/v1/podspec_safety.go) and registers an UPDATE-aware validating admission webhook to reject tenant-supplied PodSpec fields that cross the sandbox boundary. If immediate upgrade is not possible, compensating controls include restricting Function and Environment CRUD RBAC to trusted administrators only (effectively neutralizing the low-privilege precondition, at the cost of losing self-service for tenants), deploying a Kubernetes admission controller such as OPA Gatekeeper or Kyverno with policies that mirror the upstream validation list (block hostNetwork/hostPID/hostIPC, hostPath volumes, serviceAccountName overrides, privileged or allowPrivilegeEscalation security contexts, and dangerous capabilities including SYS_ADMIN, NET_ADMIN, SYS_PTRACE, SYS_MODULE, DAC_READ_SEARCH, DAC_OVERRIDE on Fission-managed namespaces), and enforcing PodSecurity admission at the 'restricted' level on Fission function namespaces (note this may break legitimate functions that depend on elevated runtime settings). Consult the advisory at https://github.com/fission/fission/security/advisories/GHSA-v455-mv2v-5g92 for vendor guidance.
More in Kubernetes
View allA critical vulnerability in Kubernetes ingress-nginx controller allows unauthenticated attackers with pod network access
Credential-harvesting malware compromised 84 versions of 42 TanStack npm packages on 2026-05-11 via chained GitHub Actio
Kubernetes ingress-nginx contains a configuration injection vulnerability via the mirror-target and mirror-host Ingress
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingres
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-c
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Rated critical severity (CVSS 9.9), this vulne
The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4
Fluentd configuration injection in the kube-logging Logging operator before 6.6.0 allows a namespace-scoped user who can
Kyverno Kubernetes policy engine prior to 1.x has a privilege escalation vulnerability (CVSS 9.9) allowing policy bypass
Kamaji is the Hosted Control Plane Manager for Kubernetes. Rated critical severity (CVSS 9.9), this vulnerability is rem
Jumpserver is a popular open source bastion host, and Koko is a Jumpserver component that is the Go version of coco, ref
Same weakness CWE-269 – Improper Privilege Management
View allSame technique Privilege Escalation
View allVendor StatusVendor
SUSE
Severity: Critical| Product | Status |
|---|---|
| SUSE Linux Enterprise Server 16.1 | Affected |
| SUSE Linux Enterprise Server for SAP applications 16.1 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP5 | Affected |
| SUSE Linux Enterprise Module for Package Hub 15 SP6 | Affected |
| openSUSE Leap 15.5 | Affected |
| openSUSE Leap 15.6 | Affected |
Share
External POC / Exploit Code
Leaving vuln.today