Yuxi sandbox isolation flaw exposes other tenants' data and internal services
Other users' files and passwords in this knowledge-base tool can be taken!
Summary
Docker sandboxes in Yuxi are insufficiently isolated from trusted application services, so a low-privileged authenticated user can access other tenants' files and secrets or run commands. Versions from 0.6.0.beta1 until 0.7.1 are affected.
Affected when
- Default service credentials for PostgreSQL, Neo4j, or MinIO left unchanged
- Exposed PostgreSQL account is a superuser
What to do
Update to 0.7.1. After updating, separately rotate any PostgreSQL, Neo4j, or MinIO credentials that were left at defaults, since upgrading does not change them.
Products and platforms
CVE IDs
Sources
- CVE record: cve.org (opens in a new tab)
Times
First published
First seen