Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Fission is an open-source, Kubernetes-native serverless framework that simplifies the deployment of functions and applications on Kubernetes. Prior to version 1.24.0, a tenant with environments.fission.io create/update RBAC can run privileged / allowPrivilegeEscalation / dangerous-capability containers in the Fission function or builder namespace, scheduled under the executor's high-privilege service account — enabling container-sandbox escape, host filesystem and network access, and potential node- and cluster-level compromise. This issue has been patched in version 1.24.0.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
NONE
🔴 Fission, SecurityContext Bypass via Standalone Container Field, #CVE-2026-50566 (Critical) -DC-Jun2026-748 https://dailycve.com/fission-securitycontext-bypass-via-standalone-container-field-cve-2026-50566-critical-dc-jun2026-748/
Post summary
A brief notice identifies CVE-2026-50566 as a critical SecurityContext bypass in Fission, but no technical details, PoC, exploit code, or mitigation information are provided.