TI-2026-83619 CVE-2026-120308 · GHSA-92w2-g272-fr77
Path traversal in Beta9 lets tenants access worker host files
Priority MEDIUM 43
A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue.
Vulnerabilities
3 records
TI-2026-83618 CVE-2026-120307 · GHSA-6h4h-qffc-3gfp
Path traversal in Beta9 worker file API exposes host files
Priority MEDIUM 43
The Beta9 worker serves the sandbox file API from outside the container.
TI-2026-83617 CVE-2026-120306 · GHSA-xvhg-75x6-gj86
Sandbox escape in Beta9 build worker via chroot-only isolation
Priority MEDIUM 43
Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker.