CVE-2026-79755: Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform)
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—unvalidated—into a double-quoted docker ps --filter "label=nuclio.io/namespace=<value>" command that is executed via the host shell (/bin/sh -c). Because the default auth kind is nop (unauthenticated), a remote attacker can inject arbitrary OS commands that run as root inside the dashboard container, which holds the Docker socket → host compromise. This issue has been patched in version 1.17.4.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Nuclioto a version that resolves this vulnerability.Fixed in 1.17.4
Event History
Frequently Asked Questions
Which deployments are exposed to remote exploitation?
Nuclio deployments using the local Docker platform before version 1.17.4 are exposed when the dashboard is reachable by an attacker. The default authentication kind is nop, so default authentication does not prevent unauthenticated exploitation.
What access or conditions does an attacker need?
An attacker needs network access to interact with the vulnerable Nuclio dashboard and supply a malicious function namespace value. No authentication or user interaction is required under the default nop authentication configuration.
What is the likely impact after successful exploitation?
Injected commands execute as root inside the dashboard container. Because that container holds the Docker socket, the attacker can use it to compromise the Docker host.
What should operators do if they cannot patch immediately?
The provided information identifies version 1.17.4 as the patch release but does not provide a supported workaround. Until upgrading, restrict network access to the Nuclio dashboard to trusted administrators and do not rely on the default nop authentication setting.