CVE-2026-120306 beam-cloud CVE debrief

Who should care

System administrators and security teams responsible for managing and securing Beta9 installations should assess their exposure and take immediate action to upgrade to a fixed version and restrict access to workspace tokens.

Why it matters

A critical vulnerability in Beta9 allows tenants to execute arbitrary commands on the build worker, potentially leading to worker pod and container compromise. Immediate action is required to upgrade to a fixed version and restrict access to workspace tokens.

• Potential execution of arbitrary commands on the build worker
• Possible compromise of worker pods and containers
• Modification of worker filesystem and container configurations
• Verification of worker integrity and container security

Technical summary

The vulnerability arises from the way Beta9 executes shell commands in tenant image definitions using Buildah on the build worker. The worker image uses chroot isolation but runs as uid 0 with CAP_DAC_OVERRIDE, allowing filesystem modifications. Tenant commands can modify the worker's filesystem, potentially leading to worker pod and container compromise. The issue allows a tenant with a workspace token to execute arbitrary commands on the build worker, potentially leading to a compromise of the worker pod and containers. The worker pods are privileged, and Clip v2 layered builds are the default, so a tenant can reach this by submitting one image build. The read-only proof confirmed the shared namespaces, CAP_D

Defensive priority

High

Recommended defensive actions

• Immediately upgrade to worker version 0.1.756 or later
• Restrict access to workspace tokens
• Monitor worker pod and container logs for suspicious activity
• Verify the integrity of the worker filesystem and container configurations
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented

Evidence notes

The vulnerability was confirmed through a read-only proof that verified the shared namespaces, CAP_DAC_OVERRIDE, and the visibility of the worker's runc binary at /proc/1/root. The fix was confirmed in worker version 0.1.756.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.