Fetching from the wire…
01
02
03
04
05
06
07
08
Security2026-08-27 · source-backed
The CNCF Sandbox project shipped fixes on August 26 for command injection in the Kubernetes toolset plus slab, kubevela, inspektor_gadget and aks follow-ups, SSRF in fetch_webpage and connectivity_check, and hardening of kubectl-run to execute without a host shell (GitHub). The bash toolset now validates command arguments and redirections rather than just the prefix, and session-approval prefixes are cryptographically signed to prevent forgery. Prefix-only validation is the same class of mistake as Chainlit's executable-name allowlist, appearing in two unrelated projects on the same day.
Each link below shares sources, entities, or timing with this story.
CNCF supports HolmesGPT / Shared entity: GitHub / Shared topic / Earlier coverage / Tension
Linked by a graph relationship (CNCF supports HolmesGPT); both cover GitHub; overlapping topics (cncf, same).
Chaterm uses Kubernetes / Shared entity: GitHub / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (Chaterm uses Kubernetes); both cover GitHub; reported by the same outlet (github.com).
HolmesGPT uses Kubernetes / Shared entities / Same source domain / Earlier coverage
Linked by a graph relationship (HolmesGPT uses Kubernetes); both cover August, GitHub, Kubernetes; reported by the same outlet (github.com).
NVIDIA supports Kubernetes / Shared entities / Same source domain / Shared topic / Earlier coverage
Linked by a graph relationship (NVIDIA supports Kubernetes); both cover August, GitHub; reported by the same outlet (github.com).
HolmesGPT uses Kubernetes / Shared entities / Same source domain / Earlier coverage / Tension
Linked by a graph relationship (HolmesGPT uses Kubernetes); both cover GitHub, Kubernetes; reported by the same outlet (github.com).
HolmesGPT uses Kubernetes / Shared entity: Kubernetes / Same source domain / Earlier coverage
Linked by a graph relationship (HolmesGPT uses Kubernetes); both cover Kubernetes; reported by the same outlet (github.com).
Shared entities / Same source domain / Shared topic / Tension
Both cover Chainlit, SSRF; reported by the same outlet (github.com); overlapping topics (allowlist, argument, chainlit, command).
Shared entities / Same source domain / Shared topic / Earlier coverage / Tension
Both cover August, GitHub; reported by the same outlet (github.com); overlapping topics (agent, august, same).