https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 18:08:16 +0000 https://vulnerability.circl.lu/vuln/fkie_cve-2026-79755 <p>Nuclio is a &#34;Serverless&#34; framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—unvalidated—into a double-quoted docker ps --filter &#34;label=nuclio.io/namespace=&lt;value&gt;&#34; command that is executed via the host shell (/bin/sh -c). Because the default auth kind is nop (unauthenticated), a remote attacker can inject arbitrary OS commands that run as root inside the dashboard container, which holds the Docker socket → host compromise. This issue has been patched in version 1.17.4.</p> <p>Nuclio is a &#34;Serverless&#34; framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—unvalidated—into a double-quoted docker ps --filter &#34;label=nuclio.io/namespace=&lt;value&gt;&#34; command that is executed via the host shell (/bin/sh -c). Because the default auth kind is nop (unauthenticated), a remote attacker can inject arbitrary OS commands that run as root inside the dashboard container, which holds the Docker socket → host compromise. This issue has been patched in version 1.17.4.</p> https://vulnerability.circl.lu/vuln/fkie_cve-2026-79755