{"id":"CVE-2026-120307","url":"https://www.cyber-defence.io/tools/cve/CVE-2026-120307","generatedAt":"2026-11-04T11:49:47.201Z","title":"In the shipped remote-node manifests that service account is bound to cluster-admin.","description":"The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's container path into a worker path. If the unresolved path starts with a mount destination, including the default upload mount at /tmp/.beta9, the remainder is joined onto that mount's source with filepath.Join, which cleans parent-directory segments after the prefix check. A long enough run of those segments names any absolute path on the worker. A path that matches no mount is joined onto the container root and opened in the worker's own filesystem, so an absolute symbolic link such as /var/run pointing at /run is followed against the worker root. Upload, download, stat, list, find-in-files, replace-in-files, and delete-file all call this helper. A tenant with a workspace token and one running sandbox can read, write, list, and delete files on the hosting worker as root, including files of other tenants on that machine. A read-only proof downloaded the worker pod's Kubernetes service account token through the file API for a path that did not exist inside the sandbox. In the shipped remote-node manifests that service account is bound to cluster-admin. Fixed in worker 0.1.756: sandbox file operations and workspace sync open paths with os.OpenRoot, so parent-directory and symlink lookups stay inside the container root or the mount source.","published":"2026-11-01T13:18:01.000Z","lastModified":"2026-11-02T20:17:40.000Z","status":"Deferred","sourceIdentifier":"reefs@jfrog.com","cvss":{"version":"3.1","score":9.9,"severity":"CRITICAL","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H"},"cwe":["CWE-22","CWE-23","CWE-59"],"affected":[],"epss":{"score":0.00484,"percentile":0.41734,"date":"2026-11-03","history":[{"date":"2026-11-02","score":0.00484,"percentile":0.4168}]},"kev":{"listed":false},"exploits":{"count":0,"verified":false,"firstPublished":null,"source":"Exploit-DB (https://gitlab.com/exploit-database/exploitdb)","entries":[]},"verdict":{"level":"high","text":"High impact if exploited, but EPSS currently rates exploitation as unlikely (0.48%). Schedule it in the normal patch cycle and watch for a rise in EPSS or a public exploit."},"changes":[{"kind":"new","label":"New CVE","at":"2026-11-01T13:18:01.000Z","detail":{"score":"9.9","severity":"CRITICAL","publishedAt":"2026-11-01T13:18:01.497Z"},"summary":"New CVE, critical severity (CVSS 9.9)."}],"references":[{"url":"https://github.com/beam-cloud/beta9","source":"reefs@jfrog.com"},{"url":"https://github.com/beam-cloud/beta9/commit/a28bf12cf0007c792a25d8ed282b4e8bf6f30393","source":"reefs@jfrog.com"},{"url":"https://github.com/beam-cloud/beta9/pull/1897","source":"reefs@jfrog.com"},{"url":"https://github.com/beam-cloud/beta9/releases/tag/worker-0.1.756","source":"reefs@jfrog.com"}],"sources":{"nvd":"https://nvd.nist.gov/vuln/detail/CVE-2026-120307","epss":"https://www.first.org/epss/","kev":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","exploitdb":"https://www.exploit-db.com/"},"licence":"CC BY 4.0 — link back to the CVE Explorer if you publish the results; upstream data remains subject to its own terms."}