https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 15 Oct 2026 03:03:59 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-291642 EUVD-2026-291642 https://cve.radiocsirt.org/vuln/euvd-2026-291642 https://cve.radiocsirt.org/vuln/fkie_cve-2026-34940 <p>KubeAI is an AI inference operator for kubernetes. Prior to 0.23.2, the ollamaStartupProbeScript() function in internal/modelcontroller/engine_ollama.go constructs a shell command string using fmt.Sprintf with unsanitized model URL components (ref, modelParam). This shell command is executed via bash -c as a Kubernetes startup probe. An attacker who can create or update Model custom resources can inject arbitrary shell commands that execute inside model server pods. This vulnerability is fixed in 0.23.2.</p> <p>KubeAI is an AI inference operator for kubernetes. Prior to 0.23.2, the ollamaStartupProbeScript() function in internal/modelcontroller/engine_ollama.go constructs a shell command string using fmt.Sprintf with unsanitized model URL components (ref, modelParam). This shell command is executed via bash -c as a Kubernetes startup probe. An attacker who can create or update Model custom resources can inject arbitrary shell commands that execute inside model server pods. This vulnerability is fixed in 0.23.2.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-34940 https://cve.radiocsirt.org/vuln/ghsa-324q-cwx9-7crr <p><strong>Affected:</strong> Go: github.com/kubeai-project/kubeai</p> <p>## CHAMP: Description</p> <p>### Summary</p> <p>The `ollamaStartupProbeScript()` function in `internal/modelcontroller/engine_ollama.go` constructs a shell command string using `fmt.Sprintf` with unsanitized model URL components (`ref`, `modelParam`). This shell command is executed via `bash -c` as a Kubernetes startup probe. An attacker who can create or update `Model` custom resources can inject arbitrary shell commands that execute inside model server pods.</p> <p>### Details</p> <p>The `parseModelURL()` function in `internal/modelcontroller/model_source.go` uses a regex (`^([a-z0-9]+):\/\/([^?]+)(\?.*)?$`) to parse model URLs. The `ref` component (capture group 2) matches `[^?]+`, allowing any characters except `?`, including shell metacharacters like `;`, `|`, `$()`, and backticks.</p> <p>The `?model=` query parameter (`modelParam`) is also extracted without any sanitization.</p> <p>**Vulnerable code** ([permalink](https://github.com/kubeai-project/kubeai/blob/ba1824e8c1d70c9092b6c0a48199bba3b8973fee/internal/modelcontroller/engine_ollama.go#L185-L196)):</p> <p>```go func ollamaStartupProbeScript(m *kubeaiv1.Model, u modelURL) string { startupScript := &#34;&#34; if u.scheme == &#34;pvc&#34; { startupScript = fmt.Sprintf(&#34;/bin/ollama cp %s %s&#34;, u.modelParam, m.Name) } else { if u.pull { pullCmd := &#34;/bin/ollama pull&#34; if u.insecure { pullCmd += &#34; --insecure&#34; } startupScript = fmt.Sprintf(&#34;%s %s &amp;&amp; /bin/ollama cp %s %s&#34;, pullCmd, u.ref, u.…</p> <p><strong>Affected:</strong> Go: github.com/kubeai-project/kubeai</p> <p>## CHAMP: Description</p> <p>### Summary</p> <p>The `ollamaStartupProbeScript()` function in `internal/modelcontroller/engine_ollama.go` constructs a shell command string using `fmt.Sprintf` with unsanitized model URL components (`ref`, `modelParam`). This shell command is executed via `bash -c` as a Kubernetes startup probe. An attacker who can create or update `Model` custom resources can inject arbitrary shell commands that execute inside model server pods.</p> <p>### Details</p> <p>The `parseModelURL()` function in `internal/modelcontroller/model_source.go` uses a regex (`^([a-z0-9]+):\/\/([^?]+)(\?.*)?$`) to parse model URLs. The `ref` component (capture group 2) matches `[^?]+`, allowing any characters except `?`, including shell metacharacters like `;`, `|`, `$()`, and backticks.</p> <p>The `?model=` query parameter (`modelParam`) is also extracted without any sanitization.</p> <p>**Vulnerable code** ([permalink](https://github.com/kubeai-project/kubeai/blob/ba1824e8c1d70c9092b6c0a48199bba3b8973fee/internal/modelcontroller/engine_ollama.go#L185-L196)):</p> <p>```go func ollamaStartupProbeScript(m *kubeaiv1.Model, u modelURL) string { startupScript := &#34;&#34; if u.scheme == &#34;pvc&#34; { startupScript = fmt.Sprintf(&#34;/bin/ollama cp %s %s&#34;, u.modelParam, m.Name) } else { if u.pull { pullCmd := &#34;/bin/ollama pull&#34; if u.insecure { pullCmd += &#34; --insecure&#34; } startupScript = fmt.Sprintf(&#34;%s %s &amp;&amp; /bin/ollama cp %s %s&#34;, pullCmd, u.ref, u.…</p> https://cve.radiocsirt.org/vuln/ghsa-324q-cwx9-7crr