Beta9 is vulnerable to Host Filesystem Exposure via Volume Path Traversal

Summary

Beta9 gateway versions below 0.1.776 and worker versions below 0.1.756 let a tenant with any workspace token attach a volume whose identifier uses parent-directory segments, such as ../../.., so the mount resolves to the worker's filesystem root. The mount is read-write by default, exposing host files and other tenants' volumes stored on that host.

Mitigation

Upgrade the gateway to 0.1.776 or later and the worker to 0.1.756 or later. Both components need the upgrade, because stubs saved before the check are validated only when launched.

Related items

• MediumGHSA-j656-3hf2-fvjc: DBHub: MySQL and MariaDB comment interpretation bypasses read-only SQL validationSimilar attack · GitHub Advisory Database
• MediumCritical Langflow Flaws Could Let Unauthenticated Attackers Run Code on ServersSimilar attack · The Hacker News
• LowChainalysis Discloses Data Breach Following AI-Driven CyberattackSimilar attack · SecurityWeek
• CriticalBeta9 is vulnerable to a Build Worker Sandbox Escape via Chroot-only Buildah IsolationSimilar attack · JFrog Security Research (Vulnerabilities)
• CriticalBeta9 is vulnerable to a Container Escape via Unvalidated Sandbox File PathsSimilar attack · JFrog Security Research (Vulnerabilities)