CVE-2026-120306 Beta9 build sandbox escape via chroot-only isolation

Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker. The worker image sets BUILDAHISOLATION=chroot, and no buildah invocation passes --isolation, so the step only changes its filesystem root. It keeps the worker...

CVE-2026-120306 Beta9 build sandbox escape via chroot-only isolation

Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker. The worker image sets BUILDAHISOLATION=chroot, and no buildah invocation passes --isolation, so the step only changes its filesystem root. It keeps the worker...

CVE-2026-120306

The Beta9 build worker is vulnerable to a sandbox escape because it executes tenant shell commands using Buildah with chroot-only isolation . Due to the BUILDAH_ISOLATION=chroot setting and a lack of explicit --isolation flags, the build process retains the worker pod's PID, network, IPC, and use...

CVE-2026-120306 Beta9 build sandbox escape via chroot-only isolation

Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker. The worker image sets BUILDAHISOLATION=chroot, and no buildah invocation passes --isolation, so the step only changes its filesystem root. It keeps the worker...

CVE-2026-47107

Windmill prior to 1.703.2 contains an incorrect default permissions vulnerability in nsjail sandbox configuration files where /etc is bind-mounted without read-write restrictions, allowing authenticated users to write arbitrary entries to /etc/hosts, /etc/resolv.conf, and...

CVE-2025-11157

A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the Kubernetes materializer job located at "feast/sdk/python/feast/infra/computeengines/kubernetes/main.py". The vulnerability arises from the use of "yaml.load..., Loader=yaml.Loader" to...

CVE-2025-11157: Deserialization of Untrusted Data

A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the Kubernetes materializer job located at feast/sdk/python/feast/infra/computeengines/kubernetes/main.py. The vulnerability arises from the use of yaml.load..., Loader=yaml.Loader to...

PT-2026-6351

A high-severity remote code execution vulnerability exists in feast-dev/feast version 0.53.0, specifically in the Kubernetes materializer job located at feast/sdk/python/feast/infra/compute engines/kubernetes/main.py. The vulnerability arises from the use of yaml.load..., Loader=yaml.Loader to...