Evidence · DiggingBeagle record
JFrog: Beta9 sandbox path escape, CVE-2026-120307
A Beta9 sandbox user could supply unvalidated filesystem paths to service file APIs, causing operations to resolve outside the intended tenant sandbox into the worker environment. JFrog reports that CVE-2026-120307 exposes worker Kubernetes service-account token material in a controlled reproduction. The issue crosses a sandbox-to-worker boundary; it is not a blanket cluster takeover assertion. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
- Source role
- primary disclosure
Evidence record
A Beta9 sandbox user could supply unvalidated filesystem paths to service file APIs, causing operations to resolve outside the intended tenant sandbox into the worker environment. JFrog reports that CVE-2026-120307 exposes worker Kubernetes service-account token material in a controlled reproduction. The issue crosses a sandbox-to-worker boundary; it is not a blanket cluster takeover assertion. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
Claim-level citations (3)
- supportsBeta9 sandbox file paths reached Kubernetes worker service-account material: JFrog reports that CVE-2026-120307 exposes worker Kubernetes service-account token material in a controlled reproduction. The issue crosses a sandbox-to-worker boundary; it is not a blanket cluster takeover assertion.
JFrog advisory CVE-2026-120307; path validation and service account token
- supportsBeta9 sandbox file paths reached Kubernetes worker service-account material: A Beta9 sandbox user could supply unvalidated filesystem paths to service file APIs, causing operations to resolve outside the intended tenant sandbox into the worker environment.
JFrog advisory CVE-2026-120307; path validation and service account token
- supportsBeta9 sandbox file paths reached Kubernetes worker service-account material: JFrog attributes Beta9 worker file-API path traversal to CVE-2026-120307 and identifies worker version 0.1.756 as the corrected release. The demonstrated token read remained within the worker context.
CVE-2026-120307: file API and fix in worker 0.1.756