Vibe Coding
Two Eclipse Ankaios CVEs let a sandboxed workload read whole-cluster state or kill the agent through the Control Interface
CVE-2026-84173 (v0.5.1 through v1.0.1, published 7 September) is an authorizer bug: multi-segment allow rules whose first path segment is a wildcard are mis-evaluated, so a workload can send a CompleteStateRequest or UpdateStateRequest with an empty field mask and be authorized to read or replace state outside its scope. CVE-2026-85201 (0.1.0 through 1.0.1) is the companion: the agent does not bound the declared length of a length-delimited protobuf message on the Control Interface FIFO, so a workload can force an unbounded allocation and abort the agent. If you are using Ankaios as the orchestration layer under agent workloads, the sandbox boundary is the thing that broke.
Source
↳ Follow the thread