TI-2026-55234 CVE-2026-79755
Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform)
Priority HIGH 70
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.
nuclio
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high6CVSS 7.0–8.9
Exploited now
nuclio records in CISA KEVNo nuclio vulnerabilities are listed in CISA KEV.
Records
7 records
TI-2026-37941 CVE-2026-52833 · GHSA-3v79-m2cg-89ww
Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE
Priority HIGH 70
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.
TI-2026-33468 CVE-2026-45730 · GHSA-m8xg-8xg9-mxhm
Nuclio: Missing authorization on project write paths allows any authenticated user to modify or delete any project
Priority HIGH 69
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.
TI-2026-55233 CVE-2026-79754
Nuclio: Kaniko build tempDir command injection
Priority MEDIUM 64
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.
TI-2026-37940 CVE-2026-52832 · GHSA-wpcj-rmv4-86qg
Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container
Priority MEDIUM 56
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.
TI-2026-55235 CVE-2026-79756
Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platform
Priority MEDIUM 54
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.
TI-2026-37939 CVE-2026-52831 · GHSA-v5px-423j-pf7p
Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE
Priority LOW 38
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing.