What’s Vulnerable › Products

nuclio vulnerabilities

8 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your nuclio version is affected

Latest nuclio vulnerabilities

• CVE-2026-79756 — Nuclio: Unauthenticated OS command injection via namespace header in list-all resource path on local platform (CVSS 8.7)
• CVE-2026-79755 — Nuclio: Unauthenticated OS command injection via function namespace in docker ps --filter label (local Docker platform) (CVSS 8.0)
• CVE-2026-79754 — Nuclio: Kaniko build tempDir command injection (CVSS 7.1)
• CVE-2026-52833 — Nuclio: Unsanitized runtimeAttributes.repositories injected into Groovy build.gradle leads to build-time RCE (CVSS 8.0)
• CVE-2026-52832 — Nuclio: Unauthenticated path traversal in spec.handler allows arbitrary file write in Dashboard container (CVSS 4.9)
• CVE-2026-52831 — Nuclio: Unsanitized cron trigger event headers/body injected into CronJob shell command leads to persistent RCE (CVSS 8.0)
• CVE-2026-45730 — Nuclio: Missing authorization on project write paths allows any authenticated user to modify or delete any project (CVSS 8.3)
• CVE-2026-29042 — Nuclio Shell Runtime Command Injection Leading to Privilege Escalation (CVSS 9.8)