CVE-2026-5555-Container-Escape-via-proc-self-fd-Symlink-in-Shared-Volume

CVE-2026-5555 – 通过 /proc/self/fd 符号链接实现容器逃逸 概述 使用 rshared 传播方式挂载的共享卷允许恶意容器通过 /proc/self/fd 创建指向主机文件的符号链接。向该卷写入数据的主机进程会跟随该符号链接，覆盖关键主机文件，从而实现容器逃逸。 漏洞详情 类型： 容器逃逸 / 符号链接攻击 影响： 覆盖主机文件，可在主机上提权至 root。 根本原因： 容器运行时未能阻止攻击者通过 procfs 技巧创建指向容器挂载命名空间之外的符号链接。 漏洞利用演示 1. 启动模拟的主机日志服务： python...

CVE-2026-45699

Netatalk is a Free and Open Source file server suite for Unix-like operating systems. In versions 3.1.19 through 4.4.2, a stack-based buffer overflow exists in the copydir function of Netatalk's afpd daemon due to an integer underflow in the calculation of the remaining buffer size used for path...

CVE-2026-50284 Craft CMS: Missing peer-permission check in `AssetsController::actionDeleteFolder` allows deletion of other users' assets

Craft CMS is a content management system CMS. In versions 5.0.0-RC1 through 5.9.21 and 4.0.0-RC1 through 4.17.14, theAssetsController::actionDeleteFolder only requires the deleteAssets: permission for the target folder. It never enforces deletePeerAssets:, even though Assets::deleteFoldersByIds...

CVE-2026-50568

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.25.0, SanitizeFilePath in pkg/utils/utils.go validated that a path stayed under a safe directory by calling strings.HasPrefixpath,...

Fission 安全漏洞

Fission is an open-source function deployment framework based on Kubernetes. Versions of Fission prior to 1.25.0 contain security vulnerabilities. These vulnerabilities stem from the SanitizeFilePath function, which uses string prefix checks instead of directory boundary checks. As a result,...

PT-2026-48513

Name of the Vulnerable Software and Affected Versions Fission versions prior to 1.25.0 Description Fission is a Kubernetes-native serverless framework. The SanitizeFilePath function in pkg/utils/utils.go performs a lexical check using strings.HasPrefixpath, safedir to ensure a path remains within...

Fission builder accepts arbitrary buildcmd strings from Environment.spec.builder.command, allowing the builder pod to invoke arbitrary executables

Summary Before the round-1 security sweep, pkg/builder/builder.go passed Environment.spec.builder.command directly into exec.Command... after a strings.Fields split, with no validation of the executable path or its arguments. A user who could create or update Environment CRDs in a namespace...

PT-2026-42605

Summary Before the round-1 security sweep, pkg/builder/builder.go passed Environment.spec.builder.command directly into exec.Command... after a strings.Fields split, with no validation of the executable path or its arguments. A user who could create or update Environment CRDs in a namespace...

EUVD-2022-33533

Malicious code in bioql PyPI...

EUVD-2022-29418

Malicious code in bioql PyPI...

EUVD-2022-33560

Malicious code in bioql PyPI...

EUVD-2022-33532

Malicious code in bioql PyPI...

EUVD-2022-29365

Malicious code in bioql PyPI...

EUVD-2022-33544

Malicious code in bioql PyPI...

EUVD-2022-33530

Malicious code in bioql PyPI...

EUVD-2022-33548

Malicious code in bioql PyPI...

EUVD-2022-33559

Malicious code in bioql PyPI...

EUVD-2022-31334

Malicious code in bioql PyPI...

EUVD-2022-33545

Malicious code in bioql PyPI...

runc 安全漏洞

runc is an Open Container Initiative open source CLI Command Line Interface tool for generating and running containers according to the OCI specification. A security vulnerability exists in runc version 1.1.13 and earlier and version 1.2.0-rc2 and earlier, which stems from a contention condition ...