{"data":{"id":"9c968325-ab6e-4a5e-b442-319bc37367bf","title":"Beta9 is vulnerable to a Build Worker Sandbox Escape via Chroot-only Buildah Isolation","summary":"Beta9 workers before 0.1.756 run each tenant image build step with Buildah using BUILDAH_ISOLATION=chroot, without passing --isolation. This leaves the step sharing the worker pod's PID, network, IPC and user namespaces, running as uid 0 with CAP_DAC_OVERRIDE, so a tenant with any workspace token can reach the worker's filesystem through /proc/1/root in a single image build. The CVSS score is 9.9 (critical), and the issue was discovered by Natan Nehorai of the JFrog Security Research Team.","solution":"N/A -- no mitigation discussed in source.","labels":["security"],"sourceUrl":"https://research.jfrog.com/vulnerabilities/beta9-is-vulnerable-to-a-build-worker-sandbox-escape-via-chroot-only-buildah-isolation-cve-2026-120306/","publishedAt":"2026-11-01T00:00:00.000Z","cveId":null,"cweIds":null,"cvssScore":null,"cvssSeverity":null,"severity":"critical","attackType":["other"],"issueType":"vulnerability","affectedPackages":null,"affectedPackageNames":null,"affectedPackageRefs":null,"affectedVendors":[],"affectedVendorsRaw":["Beta9"],"classifierModel":"claude-haiku-5-5","classifierPromptVersion":"v4","summaryPromptVersion":"v2","headline":null,"headlinePromptVersion":null,"cvssVector":null,"attackVector":null,"attackComplexity":null,"privilegesRequired":null,"userInteraction":null,"exploitMaturity":null,"epssScore":null,"epssCheckedAt":null,"kevDateAdded":null,"advisoryAliases":null,"affectedPackagesSource":null,"affectedPackagesCheckedAt":null,"patchAvailable":null,"disclosureDate":"2026-11-01T00:00:00.000Z","fixReleasedAt":null,"daysToFix":null,"fixCheckedAt":null,"capecIds":null,"crossRefCount":0,"attackSophistication":"moderate","impactType":["confidentiality","integrity"],"aiComponentTargeted":"plugin","llmSpecific":false,"classifierConfidence":0.8,"researchCategory":null,"atlasIds":null,"fixes":[]}}