CVE-2026-52831highCWE-78

CVE-2026-52831: falha de alta gravidade em nuclio

Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar nuclio+ Monitorar github.com/nuclio/nuclio

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 8epss 0.5%
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.16.4, the Nuclio controller builds a curl invocation string for each cron trigger and stores it as the args of a Kubernetes CronJob container (/bin/sh, -c, <command>). Two fields in the trigger specification flow into this string without adequate sanitization: event.headers keys and event.body. This issue has been patched in version 1.16.4.
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Produtos afetados
nuclio · nuclio
CVEs relacionadas — nuclio

No mesmo produto, das mais perigosas para as menos.

CVE-2026-79756HIGHNuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platformEPSS 7.5%CVE-2026-29042HIGHNuclio Shell Runtime Command Injection Leading to Privilege EscalationEPSS 2.6%CVE-2026-79754HIGHNuclio: Kaniko build tempDir command injectionEPSS 0.7%CVE-2026-79755HIGHNuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform)EPSS 0.7%CVE-2026-52832MEDIUMNuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard containerEPSS 0.6%CVE-2026-52833HIGHNuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCEEPSS 0.6%