beam-cloud

Records3All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical3CVSS 9.0–10.0

CVSS high0CVSS 7.0–8.9

Exploited now

beam-cloud records in CISA KEV

No beam-cloud vulnerabilities are listed in CISA KEV.

3 records

TI-2026-83619 CVE-2026-120308 · GHSA-92w2-g272-fr77

MEDIUM 43

A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00527 Published 2026-11-01 Fixed in 0.1.776, 0.1.756 CWE-22

TI-2026-83618 CVE-2026-120307 · GHSA-6h4h-qffc-3gfp

MEDIUM 43

The Beta9 worker serves the sandbox file API from outside the container.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00484 Published 2026-11-01 Fixed in 0.1.756 CWE-22

TI-2026-83617 CVE-2026-120306 · GHSA-xvhg-75x6-gj86

MEDIUM 43

Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.00362 Published 2026-11-01 Fixed in 0.1.756 CWE-269