CVE-2026-50567

Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.25.0, Unarchive in pkg/utils/zip.go joined each archive entry name with the destination directory via filepath.Join and wrote the result without checking whether the resolved path stayed under the destination. A zip entry named ../../tmp/evil therefore landed at /tmp/evil. An attacker who could control a Package.Spec.Source.URL or Deployment.URL archive could induce the fetcher (running as the per-environment pod's fission-fetcher sidecar) to write files anywhere that process could reach: into other tenants' /packages/<ns>/ directories, into mounted secret/config volumes, or into the fetcher's own binary. This issue has been patched in version 1.25.0.

• CWE-22

• https://github.com/fission/fission/pull/3444
• https://github.com/fission/fission/releases/tag/v1.25.0
• https://github.com/fission/fission/security/advisories/GHSA-q6vm-xqc9-v3ff

Published

Jun 10, 2026

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-50561Yuxi is a large-model-based intelligent knowledge base and k…9.4
• CVE-2026-50562FastGPT is a knowledge-based AI application platform. At com…9.3
• CVE-2026-50563Fission is an open-source, Kubernetes-native serverless fram…9.9
• CVE-2026-50564Fission is an open-source, Kubernetes-native serverless fram…9.9
• CVE-2026-50565Fission is an open-source, Kubernetes-native serverless fram…4.9
• CVE-2026-50566Fission is an open-source, Kubernetes-native serverless fram…9.9
• CVE-2026-50568Fission is an open-source, Kubernetes-native serverless fram…3.6
• CVE-2026-50569Fission is an open-source, Kubernetes-native serverless fram…4.3
• CVE-2026-5057ATEN Unizon RpcProvider Missing Authentication Denial-of-Ser…7.5
• CVE-2026-50570Fission is an open-source, Kubernetes-native serverless fram…8.5
• CVE-2026-50573pnpm is a package manager. Prior to 10.34.0 and 11.4.0, `pnp…8.1
• CVE-2026-50574yt-dlp is a command-line audio/video downloader. Prior to 20…9.6