CVE-2026-50566

Name of the Vulnerable Software and Affected Versions Fission versions prior to 1.24.0

Description An issue exists in the Kubernetes-native serverless framework where a tenant with environments.fission.io create/update RBAC permissions can deploy containers with privileged access, allowPrivilegeEscalation, or dangerous capabilities within the Fission function or builder namespace. These containers are scheduled under the executor's high-privilege service account, which can lead to a container-sandbox escape, providing unauthorized access to the host filesystem and network, and potentially resulting in the compromise of the node and the entire cluster.

Recommendations Update to version 1.24.0.