CVE-2026-79755 Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform)
Remote attackers can execute arbitrary OS commands as root via unvalidated namespace input in Nuclio's Docker platform, leading to host compromise.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-79755?
CVE-2026-79755 is a high-severity command injection vulnerability in nuclio, published on 2 Sep 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. Prior to version 1.17.4, on the Nuclio local Docker platform, the function namespace is interpolated—unvalidated—into a double-quoted docker ps --filter "label=nuclio.io/namespace=<value>" command that is executed via the host shell (/bin/sh -c). Because the default auth kind is nop (unauthenticated), a remote attacker can inject arbitrary OS commands that run as root inside the dashboard container, which holds the Docker socket → host compromise. This issue has been patched in version 1.17.4.
Weakness: CWE-78
Which versions are affected by CVE-2026-79755?
How do I fix CVE-2026-79755?
No fix has been published for CVE-2026-79755 yet. Limit exposure of the affected software until one is available.
Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.
Is CVE-2026-79755 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-79755 exists.
Sources
Also known as GHSA-2893-rq73-w22x.