Database/Container, Kubernetes & orchestration

Nuclio dashboard: unvalidated function namespace is interpolated into a shell docker ps command

CVE-2026-79755Container, Kubernetes & orchestrationcurated

Impact

The dashboard builds docker ps --filter "label=nuclio.io/namespace=<value>" and runs it through /bin/sh with the namespace taken straight from the request. Injected metacharacters execute as root inside the dashboard container, and that container holds the Docker socket, so a single HTTP request turns into control of every container on the host and the ability to start new ones with whatever device and privilege flags the socket allows. Nuclio's default auth kind is nop, so a stock local/Docker deployment needs no credentials; note the CVSS vector supplied with this record scores PR:H, which does not match the unauthenticated path the advisory describes. Nuclio functions are frequently the serving front end for inference workloads, so the dashboard often sits on the same hosts as the accelerators.

Who can reach it

Anyone who can reach the Nuclio dashboard HTTP API on a local/Docker-platform deployment. No authentication is required while the default nop auth kind is in place.

What to do

Upgrade to Nuclio 1.17.4 and restart the dashboard container. Until the upgrade lands, keep the dashboard off any network a tenant can reach and put authentication in front of it; only the local/Docker platform runs this code path. Track CVE-2026-79756 at the same time, a second injection in the same dashboard fixed in the same release.

References

https://nvd.nist.gov/vuln/detail/CVE-2026-79755 https://github.com/nuclio/nuclio/security/advisories/GHSA-2893-rq73-w22x https://github.com/nuclio/nuclio/commit/24582ac354d04951ec6786b3fe6ccf3b32652e9f https://github.com/nuclio/nuclio/releases/tag/1.17.4

This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.