In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes (FIFOs) under a predictable path derived from the agent name and a hash of the workload's runtime configuration. If these files or FIFOs already exist when the agent starts or restarts, the agent reuses them based solely on existence and file-type checks, without validating ownership or permissions. A local, unprivileged user with write access to the base directory (defaulting to $TMPDIR/ankaios, such as a shared /tmp) can pre-create this path hierarchy and FIFOs before the agent starts. The agent then treats these attacker-owned FIFOs as legitimate Control Interfaces, allowing the attacker to complete the Control Interface handshake and issue requests with the workload's configured controlInterfaceAccess permissions. This can lead to impersonation of the workload and unauthorized reading or modification of the cluster's desired state depending on permissions.

A local unprivileged attacker with write access to the agent's base directory can impersonate a workload by pre-creating Control Interface FIFOs. This allows the attacker to issue requests with the workload's controlInterfaceAccess permissions, potentially leading to unauthorized reading or modification of the cluster's desired state. The vulnerability compromises workload integrity and confidentiality within the cluster environment.

No official patch or fix is currently available for this vulnerability. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is released, restrict write access to the agent's base directory (default $TMPDIR/ankaios) to trusted users only to prevent pre-creation of FIFOs by unprivileged users.