CVE-2026-50564

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-50564
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-50564.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2026-50564
Aliases
Downstream
Related
Published
2026-06-10T17:27:34Z
Modified
2026-08-12T03:51:23Z
Severity
  • 9.9 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H CVSS Calculator
Summary
Fission Environment CRD podspec passthrough enables hostPID/hostNetwork/privileged pods, node escape
Details

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, Fission's Environment CRD exposes spec.runtime.podSpec and spec.builder.podSpec, which are merged into the Kubernetes pod specs for runtime and builder pods. The merge logic propagated hostNetwork, hostPID, hostIPC, container privileged, and serviceAccountName from the user-supplied podspec with no filtering, and Environment.Validate performed no security-relevant checks on these fields. This issue has been patched in version 1.24.0.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-269",
        "CWE-284",
        "CWE-693"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/50xxx/CVE-2026-50564.json"
}
References

Affected packages

Git / github.com/fission/fission

Affected ranges

Type
GIT
Repo
https://github.com/fission/fission
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
ce617120c41b9e4a51d577f81b441238264e88fd
Database specific
Show details 
{
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "fixed": "1.24.0"
        }
    ],
    "source": [
        "AFFECTED_FIELD",
        "REFERENCES"
    ]
}

Affected versions

0.*
0.10.0
0.3.0
0.3.0-rc
0.4.0
0.4.0rc
0.4.1
0.6.0
0.6.1
0.7.2
1.*
1.0-rc1
1.13.0
1.13.1
1.14.0
1.14.1
1.3.0
1.6.0
1.7.0
1.7.0-rc.1
1.7.0-rc.2
1.7.1
1.8.0
Other
alpha20170124
kubecon
latest
nightly20170621
nightly20170705
v0.*
v0.2.0-20170901
v0.2.1
v1.*
v1.13.0
v1.13.1
v1.14.0
v1.14.1
v1.15.0
v1.15.0-rc1
v1.15.0-rc2
v1.15.1
v1.16.0
v1.16.0-rc1
v1.16.0-rc2
v1.17.0
v1.17.0-rc1
v1.17.0-rc2
v1.18.0
v1.18.0-rc1
v1.18.0-rc2
v1.19.0
v1.19.0-rc1
v1.19.0-rc2
v1.20.0
v1.20.0-rc1
v1.20.0-rc2
v1.20.1
v1.20.2
v1.20.3
v1.20.4
v1.20.5
v1.21.0
v1.21.0-rc1
v1.21.0-rc2
v1.22.0
v1.22.0-rc1
v1.22.0-rc2
v1.23.0
v1.23.0-rc1
v1.6.0
v1.7.0
v1.7.0-rc.1
v1.7.0-rc.2
v1.7.1
v1.8.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2026-50564.json"