CVE-2026-50566
CriticalCVSS 9.9Exploitation Probability (EPSS)
Low risk11th percentile - higher than 11% of all known CVEs
Summary
Fission is a serverless framework, native to Kubernetes, that simplifies the deployment of functions and applications. In versions prior to 1.24.0, a user with appropriate RBAC permissions could run privileged containers, leading to container-sandbox escape and access to the host's filesystem and network.
Risk Assessment
The risk to the organization involves the potential for node or cluster takeover, which could lead to serious security breaches and data loss.
Recommendation
It is recommended to upgrade to version 1.24.0 or later to mitigate this vulnerability and secure the environment against potential attacks.
Other vulnerabilities in Fission framework
See all- CVE-2026-49823High
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications. In versions prior to 1.24.0, the Fission Function spec did not validate the namespace for Package reference, which could lead to unauthorized access.
- CVE-2026-46617High
Fission, a serverless framework for Kubernetes, prior to version 1.23.0, created runtime pods with ServiceAccountName: fission-fetcher, which had permissions to read secrets and configmaps across the entire namespace. This allowed user-supplied function code to access the Kubernetes API token, enabling it to read any secrets or configmaps in the function's namespace.
Original NVD description (English source)
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, a tenant with environments.fission.io create/update RBAC can run privileged / allowPrivilegeEscalation / dangerous-capability containers in the Fission function or builder namespace, scheduled under the executor's high-privilege service account — enabling container-sandbox escape, host filesystem and network access, and potential node- and cluster-level compromise. This issue has been patched in version 1.24.0.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS