Pending AI Enrichment

This vulnerability was recently detected via the live feed and has not yet been processed by Precogs AI's context enrichment engine. The data below represents raw telemetric data.

RAW NVD TELEMETRY

CVE-2026-79754

CVSS Base Score
N/A
Primary Weakness
CWE-77
Published Date
Sep 2, 2026
Data Source
NVD API

Nuclio is a "Serverless" framework for Real-Time Events and Data Processing. From version 1.6.19 to before version 1.17.2, Nuclio's Dashboard build pipeline does not sanitize the spec.build.tempDir field before using it to construct a shell command. When the Kaniko container builder is enabled, a user with function-create permission can inject shell metacharacters into this field and achieve arbitrary command execution inside the Dashboard container, which runs with a Kubernetes service account holding wildcard access to Secrets, Pods, Jobs, and Deployments in its namespace. This issue has been patched in version 1.17.2.

Related Vulnerabilitiesvia CWE-77

CVE-2026-44997.3 HIGH

A vulnerability was determined in D-Link DIR-820LW 2.

CWE-77CWE-78
CVE-2026-44977.3 HIGH

A vulnerability was determined in Totolink WA300 5.

CWE-77CWE-78
CVE-2026-44965.3 MEDIUM

A vulnerability was found in sigmade Git-MCP-Server up to 785aa159f262a02d5791a5d8a8e13c507ac42880.

CWE-77CWE-78
CVE-2025-156070 UNKNOWN

A command injection vulnerability on AX53 v1 occurs in mscd debug functionality due to insufficient input handling, allowing log redirection to arbitrary files and concatenation of unvalidated file content into shell commands, enabling authenticated attackers to inject and execute arbitrary commands.

CWE-77
CVE-2026-44684.7 MEDIUM

A vulnerability was determined in Comfast CF-AC100 2.

CWE-74CWE-77
CVE-2026-44674.7 MEDIUM

A vulnerability was found in Comfast CF-AC100 2.

CWE-74CWE-77

Is your system affected?

Precogs AI detects CVE-2026-79754 in compiled binaries, LLMs, and application layers — even without source code access.

Request Deep AnalysisBook a demo