CVE-2026-50545

creationtimestamp| type| source ---|---|--- 2026-06-10 19:26:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mnxgurkwmi2m 2026-06-16 16:25:31+00:00| seen| https://bsky.app/profile/attrition.org/post/3mog7m2jsis2z...

CVE-2026-50545 Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, the Environment.spec.runtime.podSpec / spec.builder.podSpec passthrough lacked validation, and MergePodSpec propagated dangerous...