A Beta9 tenant can attach a volume when deploying a function, endpoint, or task queue. The gateway builds the host path by joining the shared volumes root, the workspace name, and the volume identifier from the stub configuration. Nothing checks that the identifier names a volume that workspace owns. Parent-directory segments in the identifier collapse the joined path to the worker's filesystem root, and [truncated]
A critical vulnerability was found in Beta9, a system used for building tenant image definitions. The vulnerability allows a tenant with a workspace token to execute arbitrary commands on the build worker, potentially leading to a compromise of the worker pod and containers. The issue arises from the way Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it [truncated]
