CVE-2026-50566: Fission: Environment Runtime.Container and Builder.Container SecurityContext bypass allows privileged pod creation
A follow-up bypass of the round-4 PodSpec hardening (GHSA-gx55-f84r-v3r7, GHSA-wmgg-3p4h-48x7, GHSA-v455-mv2v-5g92). Those advisories validate and sanitize the PodSpec (spec.runtime.podSpec / spec.builder.podSpec /
function.spec.podSpec), but the Environment CRD also exposes spec.runtime.container and spec.builder.container — a standalone Container merged into the runtime/builder pod whose SecurityContext bypassed both layers.
References
- github.com/advisories/GHSA-m63v-2g9w-2w6v
- github.com/fission/fission/commit/695d3e97e3a20463ab7c8c081843e69e65e952e5
- github.com/fission/fission/pull/3406
- github.com/fission/fission/releases/tag/v1.24.0
- github.com/fission/fission/security/advisories/GHSA-m63v-2g9w-2w6v
- nvd.nist.gov/vuln/detail/CVE-2026-50566
Code Behaviors & Features
Detect and mitigate CVE-2026-50566 with GitLab Dependency Scanning
Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Learn more about Dependency Scanning →