{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/cpes/cpe2.3abeta9worker/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:beta9:gateway:*:*:*:*:*:*:*:*","cpe:2.3:a:beta9:worker:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-120308"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["Gateway (\u003c 0.1.776)","Worker (\u003c 0.1.756)"],"_cs_severities":["critical"],"_cs_tags":["path-traversal","sandbox-escape","cloud"],"_cs_type":"advisory","_cs_vendors":["Beta9"],"content_html":"\u003cp\u003eA path traversal vulnerability exists in Beta9 gateway and worker components where volume identifiers are not validated for ownership or path constraints. By providing a volume identifier containing parent-directory traversal sequences, an authenticated tenant can cause the worker to bind-mount directories from the host filesystem into their sandbox. This grants read/write access to worker files and data belonging to other tenants. This vulnerability is confirmed in gateway version 0.1.769 and worker version 0.1.745.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eA tenant with a workspace token can perform unauthorized read and write operations on the underlying worker filesystem, potentially resulting in cross-tenant data exposure and host system compromise.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cp\u003ePatch all Beta9 deployments by upgrading the gateway component to version 0.1.776 or later and the worker component to version 0.1.756 or later. These versions implement strict validation of volume identifiers and ownership checks.\u003c/p\u003e\n","date_modified":"2026-11-01T14:53:59Z","date_published":"2026-11-01T14:53:59Z","id":"https://feed.craftedsignal.io/briefs/2026-11-beta9-volume-traversal/","summary":"A path traversal vulnerability in the Beta9 gateway fails to validate volume ownership and paths, allowing tenants to access arbitrary worker files and other tenants data.","title":"Beta9: Sandbox escape via volume mount path traversal (CVE-2026-120308)","url":"https://feed.craftedsignal.io/briefs/2026-11-beta9-volume-traversal/"},{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:beta9:worker:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":9.9,"id":"CVE-2026-120307"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["worker (\u003c 0.1.756)"],"_cs_severities":["critical"],"_cs_tags":[],"_cs_type":"advisory","_cs_vendors":["Beta9"],"content_html":"\u003cp\u003eBeta9 worker versions prior to 0.1.756 are vulnerable to a path traversal flaw in the sandbox file API due to improper sanitization in the getHostPathFromContainerPath function. Attackers with a valid workspace token and an active sandbox can perform unauthorized file operations on the host worker filesystem. This access can be used to read or modify data belonging to other tenants and, in cases where the worker pod is assigned cluster-admin permissions, can lead to full cluster compromise. The vulnerability is confirmed to allow reading the Kubernetes service account token.\u003c/p\u003e\n\u003ch2 id=\"attack-chain\"\u003eAttack Chain\u003c/h2\u003e\n\u003col\u003e\n\u003cli\u003eAttacker gains access to a valid tenant workspace token.\u003c/li\u003e\n\u003cli\u003eAttacker initiates or uses an active sandbox session.\u003c/li\u003e\n\u003cli\u003eAttacker crafts a file path containing sequences that bypass the mount destination prefix check.\u003c/li\u003e\n\u003cli\u003eThe getHostPathFromContainerPath function resolves the malicious path to an absolute path on the host worker filesystem.\u003c/li\u003e\n\u003cli\u003eThe file API calls (Upload, download, stat, list, find-in-files, replace-in-files, or delete-file) interact with the resolved host path.\u003c/li\u003e\n\u003cli\u003eThe attacker reads or modifies sensitive host files, such as the Kubernetes service account token.\u003c/li\u003e\n\u003cli\u003eIf applicable, the attacker uses the stolen service account token to achieve cluster-admin access.\u003c/li\u003e\n\u003c/ol\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eAn attacker can achieve full read, write, and delete access to the host worker filesystem as root. This allows for the exfiltration of data from other tenants on the same worker and potential cluster-wide privilege escalation if the worker pod is configured with elevated Kubernetes permissions.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade the Beta9 worker to version 0.1.756 or later immediately to implement os.OpenRoot for sandbox file operations.\u003c/li\u003e\n\u003cli\u003eAudit Kubernetes RBAC configurations for worker pods to ensure the principle of least privilege is applied, specifically restricting cluster-admin access for worker pods.\u003c/li\u003e\n\u003cli\u003eReview access logs for the sandbox file API for anomalous path requests involving multiple parent-directory segments.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-11-01T14:53:54Z","date_published":"2026-11-01T14:53:54Z","id":"https://feed.craftedsignal.io/briefs/2026-11-beta9-worker-traversal/","summary":"The Beta9 worker contains a path traversal vulnerability in the sandbox file API that allows authenticated tenants to read, write, and delete arbitrary files on the host worker filesystem.","title":"Beta9 Worker: Sandbox path traversal (CVE-2026-120307)","url":"https://feed.craftedsignal.io/briefs/2026-11-beta9-worker-traversal/"}],"language":"en","title":"CraftedSignal Threat Feed - Cpe:2.3:a:beta9:worker:*:*:*:*:*:*:*:*","version":"https://jsonfeed.org/version/1.1"}