Labs

Short research notes on newly disclosed vulnerabilities: the problem, the payload, and the fix.

• highCVE-2026-49824

  CVE-2026-49824: Fission Cross-Namespace Environment Reference via Unvalidated EnvironmentRef

  A Fission tenant with permission to create Functions in their own namespace could point a Function at another tenant's Environment CRD, causing their code to run inside the victim's container image…

• criticalCVE-2026-50545

  CVE-2026-50545: Fission Environment PodSpec Injection Leading to Node Escape and Cluster Takeover

  A tenant with basic Kubernetes RBAC on Fission's Environment CRD can inject privileged pod settings through a two-step apply-then-patch that bypasses the admission webhook, causing poolmgr to…

• criticalCVE-2026-50563

  CVE-2026-50563: Fission Container Executor PodSpec Injection Leading to Node Escape

  A Fission user with only the ability to create functions can craft a malicious pod spec that tricks the executor into scheduling a privileged, host-namespace pod, escaping to the underlying…

• criticalCVE-2026-50564

  CVE-2026-50564: Fission Environment PodSpec Passthrough Privilege Escalation to Node Escape

  Any user with permission to create or update a Fission Environment can craft a manifest that spins up a privileged, host-network pod, giving them full access to the underlying Kubernetes node and…

• criticalCVE-2026-50566

  CVE-2026-50566: Fission Environment Container SecurityContext Bypass Allows Privileged Pod Creation

  A gap in Fission's admission and merge-layer validation lets any tenant with Environment create/update access spin up fully privileged Kubernetes pods, enabling container escape and potential…

• highCVE-2026-49451

  CVE-2026-49451: Microsoft.OpenAPI Uncontrolled Recursion via Circular Schema References

  A tiny OpenAPI document with two schemas that point at each other can exhaust the call stack and terminate any .NET process that parses it using Microsoft.OpenAPI.

• highCVE-2026-44840

  CVE-2026-44840: Dgraph DQL Injection via checkUserPassword GraphQL Query

  Dgraph's checkUserPassword GraphQL query passes user-supplied passwords directly into a DQL query string, letting an unauthenticated attacker inject arbitrary query blocks and enumerate or probe the…

• highCVE-2026-47424

  CVE-2026-47424: OpenAM Authenticated Groovy Sandbox Escape to RCE

  A flaw in OpenAM's server-side Groovy scripting sandbox lets an authenticated script author run operating-system commands on the host, breaking the only code-level wall between a realm administrator…

• high

  pnpm Path Traversal via configDependencies Lockfile Entry Allows Symlink Escape

  A crafted pnpm-lock.yaml with a dot-dot package name in configDependencies tricks pnpm install into creating symlinks outside the intended node_modules/.pnpm-config directory, giving an attacker a…

• high

  pnpm Hoisted Lockfile Alias Path Traversal ()

  A crafted pnpm lockfile alias used with the hoisted node linker could escape node_modules entirely, writing package files to arbitrary paths on the filesystem.

• highCVE-2026-49339

  CVE-2026-49339: gonic Playlist ID Path Traversal Bypasses Ownership Check

  Any logged-in user of the gonic music server can read or delete another user's private playlists by crafting a playlist ID that smuggles directory traversal sequences past the ownership check.

• highCVE-2026-55698

  CVE-2026-55698: pnpm Env Lockfile Package-Manager Integrity Bypass

  A malicious repository can commit a crafted pnpm-lock.yaml that tricks pnpm into downloading and executing an attacker-chosen pnpm binary instead of fetching a fresh, verified one from the registry.