Threats tagged 'ghsa-qc57-j976-j85m'

The boneIO black_debian_images container image granted the boneio service account excessive privileges, including full passwordless sudo access and membership in the docker group. This allowed a local attacker who compromises the boneio user to escalate privileges to root. The issue was fixed in version 1.6.0 by removing the sudoers rule and docker group membership, and by enforcing privileged operations through restricted helpers with verified migrations.