CVE-2026-120308

A Beta9 tenant can exploit a path traversal vulnerability when deploying a function, endpoint, or task queue to access the host filesystem. The vulnerability occurs because the gateway joins the shared volumes root, workspace name, and volume identifier without verifying that the workspace owns t...