CVE-2026-120306 - Beta9 build sandbox escape via chroot-only isolation
CVE ID :CVE-2026-120306 Published : Nov. 1, 2026, 1:18 p.m. | 43 minutes ago Description :Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker. The worker image sets BUILDAH_ISOLATION=chroot, and no buildah...