Executive brief
Nuclio is a serverless framework for processing real-time events and data. Prior to version 1.17.4, the local Docker deployment mode allows unauthenticated remote attackers to inject arbitrary commands that execute as root within the dashboard container, which has access to the Docker socket. This enables full compromise of the underlying host system.
Technical details
The vulnerability is an OS command injection (CWE-78) in the ShellClient.GetContainers method on the local Docker platform. The function namespace parameter is interpolated without validation into a docker ps --filter command executed via /bin/sh -c. Because the default authentication mode is nop (no authentication), any remote attacker can craft a malicious namespace value containing shell metacharacters (e.g., "; touch /tmp/pwned; echo ") to break out of the double-quoted filter token and execute arbitrary commands. The dashboard container runs as root and holds the Docker socket, enabling escalation to host compromise. The fix, applied in version 1.17.4, properly shell-escapes filter tokens using the Quote function to prevent injection. The vulnerability affects only the local Docker platform; Kubernetes deployments are not exposed.
Affected products
- Nuclio Nuclio prior to 1.17.4
Timeline
- 2026-09-02: disclosed: CVE-2026-79755 published
- 2026-07-24: patched: Fixed in version 1.17.4 via PR #4220