Evidence · DiggingBeagle record
JFrog: Beta9 volume path traversal, CVE-2026-120308
A Beta9 API permitted tenant-controlled volume identifier/path traversal to influence the host bind-mount source selected for a sandbox. JFrog reports CVE-2026-120308 allowing read/write mount exposure of worker filesystem content in the demonstrated deployment. Exact privilege and follow-on access depend on worker mounts, not all Kubernetes clusters. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
- Source role
- primary disclosure
Evidence record
A Beta9 API permitted tenant-controlled volume identifier/path traversal to influence the host bind-mount source selected for a sandbox. JFrog reports CVE-2026-120308 allowing read/write mount exposure of worker filesystem content in the demonstrated deployment. Exact privilege and follow-on access depend on worker mounts, not all Kubernetes clusters. Research/disclosure claims are specific to the documented settings; do not infer unreported victims or additional compromise.
Claim-level citations (3)
- supportsBeta9 tenant volume traversal exposed worker filesystem contents through bind mounts: JFrog reports CVE-2026-120308 allowing read/write mount exposure of worker filesystem content in the demonstrated deployment. Exact privilege and follow-on access depend on worker mounts, not all Kubernetes clusters.
JFrog advisory CVE-2026-120308; volume identifier traversal and host mount
- supportsBeta9 tenant volume traversal exposed worker filesystem contents through bind mounts: A Beta9 API permitted tenant-controlled volume identifier/path traversal to influence the host bind-mount source selected for a sandbox.
JFrog advisory CVE-2026-120308; volume identifier traversal and host mount
- supportsBeta9 tenant volume traversal exposed worker filesystem contents through bind mounts: JFrog reports that the Beta9 tenant volume mount traversal requires fixing both the gateway and the worker paths, with corrected gateway version 0.1.776 and corrected worker version 0.1.756. Updating only one component does not establish the full path is closed.
CVE-2026-120308: volume mount traversal, gateway and worker fixes