The vulnerability arises because the Nuclio Dashboard constructs a shell command from the spec.build.tempDir value without validation. A user authorized to create functions can supply shell metacharacters, causing the Dashboard container to execute arbitrary commands. Because the container runs under a Kubernetes service account with wide permissions, the attacker can, for example, read Secrets, create Jobs, or modify Deployments, resulting in data exposure, service disruption, or full cluster takeover.

Affected deployments use Nuclio Serverless framework versions from 1.6.19 up to, but not including, 1.17.2. The issue impacts the Dashboard component when the Kaniko container builder is enabled. The patch is included in release 1.17.2 and newer versions.

The CVSS score of 7.1 indicates high severity. No EPSS data is available, but an attacker with function-create permission can exploit this flaw locally within the cluster. The vulnerability is not listed in CISA KEV, but because the attacker can leverage the service account’s wildcard access, the potential impact is considerable. Mitigation relies on applying the patch or disabling the vulnerable feature.