Nuclio Dashboard: unsanitized build tempDir yields command execution in a pod holding namespace-wide Secrets access

Impact

The Dashboard build pipeline interpolates spec.build.tempDir into a shell command without sanitizing it, so when the Kaniko builder is enabled a user who can create a function injects shell metacharacters and runs arbitrary commands inside the Dashboard container. That container runs under a Kubernetes service account with wildcard access to Secrets, Pods, Jobs and Deployments in its namespace, so the payoff is not just code execution in one pod - it is every credential stored in that namespace (registry pull secrets, model-store and object-store keys, downstream API tokens) plus the ability to create workloads. On a GPU cluster where Nuclio serves inference functions, that is a path from ordinary function-author permission to controlling what gets scheduled onto the accelerators and to reading the secrets those workloads use. Affects 1.6.19 up to but not including 1.17.2.

Who can reach it

Authenticated and remote: any principal with function-create permission on the Nuclio Dashboard API. Requires the Kaniko container builder to be enabled; deployments using another builder are not on this path.

What to do

Upgrade Nuclio to 1.17.2 or later and roll the Dashboard deployment - a controller-side rolling restart, no node drain and no GPU downtime. Until you can upgrade, restrict who holds function-create rights, and separately tighten the Dashboard service account: wildcard Secrets access in the namespace is what turns this from container RCE into namespace-wide credential loss, and that stays true for the next bug in this component.

References

Related entries

• runc: Volume-mount race gives incorrect access control and privilege escalation to hostCVE-2019-19921 · runcHigh
• Podman: File permissions not checked for non-root users in a privileged containerCVE-2021-20188 · PodmanHigh
• runc: Regression of CVE-2019-19921: incorrect access control leading to privilege escalation via volume mountsCVE-2023-27561 · runcHigh
• Slurm: Filesystem race conditions allow gaining ownership of, overwriting, or deleting filesCVE-2023-41914 · SlurmHigh
• Cilium: A user who can create CiliumNetworkPolicy in one namespace affects traffic cluster-wideCVE-2023-41333 · CiliumMedium
• Docker / moby: Classic builder cache poisoning for images built FROM scratchCVE-2024-24557 · Docker / mobyMedium