Nuclio
Monthly
Incomplete patch for OS command injection in the Nuclio serverless dashboard (local/Docker platform, all versions prior to 1.17.4) leaves the list-all resource code path exploitable by unauthenticated remote attackers. Shell metacharacters injected via the X-Nuclio-Function-Namespace, X-Nuclio-Project-Namespace, or X-Nuclio-Function-Event-Namespace HTTP headers bypass the prior fix and reach a /bin/sh -c invocation in pkg/platform/local/client/store.go unescaped, enabling arbitrary command execution inside the dashboard container. No public exploit has been identified at time of analysis, but the attack surface is network-accessible and requires no authentication, lowering the bar significantly for any attacker already familiar with the previously disclosed injection class (GHSA-jx7q-cpg6-669g).
OS command injection in Nuclio's local Docker platform dashboard allows remote attackers to execute arbitrary shell commands as root inside the dashboard container, which holds the Docker socket, enabling full host compromise. The function namespace value - controllable via the unauthenticated (default 'nop' auth) API - is string-interpolated without quoting into a `docker ps --filter` command executed via `/bin/sh -c`, allowing a double-quote character to break out of the filter token and inject arbitrary commands. The issue is fixed in version 1.17.4, with the patch confirmed via GitHub release tag and PR #4220; no public exploit identified at time of analysis.
Shell command injection in Nuclio's Dashboard build pipeline (versions 1.6.19–1.17.1) allows an authenticated user with function-create permission to execute arbitrary commands inside the Dashboard container by embedding shell metacharacters in the `spec.build.tempDir` field. The post-exploitation impact is substantially amplified because the Dashboard container's Kubernetes service account holds wildcard access to Secrets, Pods, Jobs, and Deployments within its namespace, enabling full namespace-level privilege escalation from a single low-privileged API call. No public exploit identified at time of analysis, but the fix commit (PR #4190) includes working proof-of-concept test cases demonstrating semicolon, pipe, subshell, and backtick injection payloads.
Shell command injection in Nuclio serverless framework before 1.15.20. PoC and patch available.
Incomplete patch for OS command injection in the Nuclio serverless dashboard (local/Docker platform, all versions prior to 1.17.4) leaves the list-all resource code path exploitable by unauthenticated remote attackers. Shell metacharacters injected via the X-Nuclio-Function-Namespace, X-Nuclio-Project-Namespace, or X-Nuclio-Function-Event-Namespace HTTP headers bypass the prior fix and reach a /bin/sh -c invocation in pkg/platform/local/client/store.go unescaped, enabling arbitrary command execution inside the dashboard container. No public exploit has been identified at time of analysis, but the attack surface is network-accessible and requires no authentication, lowering the bar significantly for any attacker already familiar with the previously disclosed injection class (GHSA-jx7q-cpg6-669g).
OS command injection in Nuclio's local Docker platform dashboard allows remote attackers to execute arbitrary shell commands as root inside the dashboard container, which holds the Docker socket, enabling full host compromise. The function namespace value - controllable via the unauthenticated (default 'nop' auth) API - is string-interpolated without quoting into a `docker ps --filter` command executed via `/bin/sh -c`, allowing a double-quote character to break out of the filter token and inject arbitrary commands. The issue is fixed in version 1.17.4, with the patch confirmed via GitHub release tag and PR #4220; no public exploit identified at time of analysis.
Shell command injection in Nuclio's Dashboard build pipeline (versions 1.6.19–1.17.1) allows an authenticated user with function-create permission to execute arbitrary commands inside the Dashboard container by embedding shell metacharacters in the `spec.build.tempDir` field. The post-exploitation impact is substantially amplified because the Dashboard container's Kubernetes service account holds wildcard access to Secrets, Pods, Jobs, and Deployments within its namespace, enabling full namespace-level privilege escalation from a single low-privileged API call. No public exploit identified at time of analysis, but the fix commit (PR #4190) includes working proof-of-concept test cases demonstrating semicolon, pipe, subshell, and backtick injection payloads.
Shell command injection in Nuclio serverless framework before 1.15.20. PoC and patch available.