Executive brief
Nuclio Shell Runtime Command Injection Leading to Privilege Escalation in github.com/nuclio/nuclio
Affected products
- Go github.com/nuclio/nuclio
Junglewise Threat Intelligence
CVE-2026-29042: GO-2026-4598 - Nuclio Shell Runtime Command Injection Leading to Privilege Escalation in github.com/nuclio/nuclio
CVE-2026-29042 · Severity: medium · CVSS 4 · Published 2026-03-10
Technologies: github.com/nuclio/nuclio (Go). Vendors: Go.
Related threats
- Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio's Java runtime generates a buil
- Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.5, Nuclio Dashboard exposes POST /api/fun
- Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio controller builds a curl in
- Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.0, there is a vulnerability in Nuclio Das