TI-2026-34271 CVE-2026-46614 · GHSA-3g33-6vg6-27m8
Improper access control in fission
Priority MEDIUM 49
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
fission
Records17All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical5CVSS 9.0–10.0
CVSS high8CVSS 7.0–8.9
Exploited now
fission records in CISA KEVNo fission vulnerabilities are listed in CISA KEV.
Records
17 records
TI-2026-34273 CVE-2026-46617 · GHSA-85g2-pmrx-r49q
Improper privilege management in fission
Priority MEDIUM 44
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-37288 CVE-2026-50566 · GHSA-m63v-2g9w-2w6v
Fission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation
Priority MEDIUM 43
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-37286 CVE-2026-50564 · GHSA-gx55-f84r-v3r7
Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape
Priority MEDIUM 43
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-37285 CVE-2026-50563 · GHSA-v455-mv2v-5g92
Fission Container Executor Function PodSpec Injection Leading to Node Escape
Priority MEDIUM 43
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-37268 CVE-2026-50545 · GHSA-wmgg-3p4h-48x7
Fission Environment CRD PodSpec Injection Leading to Node Escape and Cluster Takeover
Priority MEDIUM 43
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-34270 CVE-2026-46612 · GHSA-chf8-4hv6-8pg6
Fission StorageSvc /v1/archive endpoint exposes unauthenticated CRUD over all function archives
Priority MEDIUM 40
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-37292 CVE-2026-50570 · GHSA-qf5v-m7p4-95rp
Improper privilege management in fission
Priority LOW 37
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-36730 CVE-2026-49824 · GHSA-cvw6-gfvv-953q
Fission: Cross-namespace Environment reference via unvalidated EnvironmentRef in Function admission webhook
Priority LOW 36
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-34274 CVE-2026-46618 · GHSA-7pjr-qpvh-m339
Improper privilege management in fission
Priority LOW 36
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-37289 CVE-2026-50567 · GHSA-q6vm-xqc9-v3ff
Fission: Zip Slip in pkg/utils/zip.go:Unarchive allows fetcher to write outside the destination directory
Priority LOW 33
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-36729 CVE-2026-49823 · GHSA-3r8v-2xmj-5c39
Fission: Cross-namespace Package read via unvalidated PackageRef in Function admission webhook
Priority LOW 33
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-36728 CVE-2026-49822 · GHSA-gc3j-79f2-7vvw
Fission: Cross-namespace event leakage via KubernetesWatchTrigger allows persistent tenant surveillance
Priority LOW 33
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-36727 CVE-2026-49821 · GHSA-vjhc-cf4p-72q4
Fission: Cross-namespace Environment reference in Package allows build-time command execution and SA token exfiltration
Priority LOW 33
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-37287 CVE-2026-50565 · GHSA-8wcj-mfrc-jx5q
Fission builder pods auto-mount the fission-builder ServiceAccount token in the user-supplied builder container
Priority LOW 22
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-37291 CVE-2026-50569 · GHSA-vchh-r53j-8mpw
Fission: HTTPTrigger admission omits RelativeURL / Prefix validation; kubectl apply bypasses CLI checks
Priority LOW 19
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.
TI-2026-37290 CVE-2026-50568 · GHSA-r5jh-q2mw-gcx4
Fission: SanitizeFilePath lexical HasPrefix bypass permits sibling-directory escape
Priority LOW 16
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes.