Nuclio’s local Docker platform concatenates the function namespace value directly into a double‑quoted docker ps command that is executed via the host shell. Because the command receives the namespace unvalidated and the default authentication mode is none, an attacker can inject arbitrary shell commands that execute as root inside the dashboard container, which has access to the Docker socket. The attacker therefore gains the ability to run any command on the host, leading to full system compromise.

Nuclio framework versions prior to 1.17.4 deployed on the local Docker platform are vulnerable. The flaw is present in the Nuclio Nuclio product across all operating systems where the dashboard container mounts the Docker socket and accepts untrusted namespace input.

The vulnerability has a CVSS score of 8, indicating high severity. No EPSS data is available, but the lack of authentication makes exploitation likely for any attacker who can reach the dashboard. The issue is not listed in the CISA KEV catalog, which suggests it is not yet a known exploited vulnerability. Attackers can exploit the flaw by sending a specially crafted namespace to the dashboard, resulting in OS command execution as the root user inside the container and subsequently on the host.