CVE-2026-79755

Nuclio, an open-source serverless framework for real-time event and data processing, fails to validate the function namespace before interpolating it into a double-quoted 'docker ps --filter' command executed through the host shell (/bin/sh -c) on its local Docker platform. A remote attacker who can reach the Nuclio dashboard can inject arbitrary OS commands into the namespace value, and because the default authentication kind is 'nop' (none), no credentials are required. Injected commands run as root inside the dashboard container, which is mounted with the Docker socket, so an attacker can pivot to full compromise of the host. Users running Nuclio prior to version 1.17.4 on the local Docker platform are affected. Exploitation has not been observed: there is no known public proof-of-concept, the flaw is not in CISA's KEV, and EPSS estimates only a 0.4% probability of exploitation within 30 days.

What to do: Upgrade Nuclio to version 1.17.4 or later. If upgrading is not immediately possible, replace the default 'nop' authentication kind on the dashboard with an enforced authentication method and restrict dashboard access to trusted networks only. Because commands execute as root in a container holding the Docker socket, defenders should also review dashboard container and host logs for signs of prior command injection.