8.2
Élevée
CVE-2026-28406 kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster
Description
kaniko is a tool to build container images from a Dockerfile, inside a container or Kubernetes cluster. Starting in version 1.25.4 and prior to version 1.25.10, kaniko unpacks build context archives using `filepath.Join(dest, cleanedName)` without enforcing that the final path stays within `dest`. A tar entry like `../outside.txt` escapes the extraction root and writes files outside the destination directory. In environments with registry authentication, this can be chained with docker credential helpers to achieve code execution within the executor process. Version 1.25.10 uses securejoin for path resolution in tar extraction.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| OpenShift Serverless | Versions non publiées | |
| kaniko 1.25 | 1.25.4 → < 1.25.10 | 1.25.10 |
Références
- github.com github.com
- github.com github.com
- github.com github.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de OpenShift Serverless
Les 79 CVE de OpenShift Serverless →
CVE-2026-107912
Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw
7.7
Élevée
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Moyenne
CVE-2026-107174
A flaw was found in source-to-image
6.4
Moyenne
CVE-2026-87743
A flaw was found in Quarkus HTTP security
7.5
Élevée