严重
漏洞预警
CVSS 9.9
CVE-2026-120306：Beta9 turns each shell command in a tenant image definition into a Doc
Beta9 turns each shell command in a tenant image definition into a Dockerfile RUN line and executes it with Buildah on the build worker. The worker image sets BUILDAH_ISOLATION=chroot, and no buildah invocation passes --…