CVE-2026-120306

The Beta9 build worker is vulnerable to a sandbox escape because it executes tenant shell commands using Buildah with chroot-only isolation . Due to the BUILDAH_ISOLATION=chroot setting and a lack of explicit --isolation flags, the build process retains the worker pod's PID, network, IPC, and use...