Threats affecting pkg:github/github.com/beam-cloud/beta9

CVE-2026-120308 is a critical path traversal vulnerability in the beam-cloud Beta9 gateway that allows a tenant with a workspace token to read and write arbitrary files on the worker's filesystem. This occurs because the gateway improperly validates volume identifiers when attaching volumes during function, endpoint, or task queue deployment. The vulnerability affects gateway versions prior to 0.1.776 and worker versions prior to 0.1.756. The issue has been fixed by validating volume identifiers and mount paths and rejecting unauthorized volumes.

CVE-2026-120307 is a critical path traversal vulnerability in the beam-cloud Beta9 worker prior to version 0.1.756. It allows a tenant with a workspace token and running sandbox to perform file operations on the hosting worker's filesystem as root, including accessing files of other tenants. The flaw arises from improper path resolution that enables escaping the container root and accessing arbitrary paths on the worker. This includes reading sensitive files such as the Kubernetes service account token, which in default configurations has cluster-admin privileges. The issue is fixed in version 0.1.756 by restricting file operations to stay within container roots or mount sources.

CVE-2026-120306 is a critical vulnerability in the beam-cloud Beta9 worker component. The issue arises because Buildah RUN steps execute with chroot isolation, sharing PID, network, IPC, and user namespaces with the privileged worker pod, which runs as root and holds CAP_DAC_OVERRIDE. This improper isolation allows tenant builds to access sensitive host resources, including the worker's binaries, Kubernetes service account token, and mounted host directories. The vulnerability is fixed in version 0.1.756 by switching to OCI isolation with private namespaces and restricting tenant ARG values.