Vulnerabilidades de beam-cloud (CVE)

Registros CVE publicados para beam-cloud, los más recientes primero. Siga el producto para recibir un correo con cada nueva.

3 resultados
9.9Crítica
CVE-2026-120308

Beta9 host filesystem exposure via volume path traversal

beam-cloud Beta9 gateway; beam-cloud Beta9 worker

A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by joining the shared volumes root, the workspace name, and the volume identifier from the stub configuration. Nothing checks that the iden…

9.9Crítica
CVE-2026-120307

Beta9 container escape via unvalidated sandbox file paths

beam-cloud Beta9 worker

The Beta9 worker serves the sandbox file API from outside the container. getHostPathFromContainerPath turns the tenant's container path into a worker path. If the unresolved path starts with a mount destination, including the default upload mount at /tmp/.bet…

9.9Crítica
CVE-2026-120306

Beta9 build sandbox escape via chroot-only isolation

beam-cloud Beta9 worker

Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker. The worker image sets BUILDAH_ISOLATION=chroot, and no buildah invocation passes --isolation, so the step only changes its…