PoC Published for CVE-2026-52832: CVE-2026-52832-PoC-exploit-nuclio-dashboard

July 29, 2026 · GitHub · Severity: CRITICAL

A proof-of-concept (PoC) exploit has been published for CVE-2026-52832, a vulnerability in Nuclio Dashboard (NOP mode) that allows unauthenticated attackers to write arbitrary files as root. The flaw stems from improper path validation in the `spec.handler` field when processing POST requests to `/api/functions`. By injecting path traversal sequences like `../../../../tmp/x.txt:handler`, an attacker can escape the build temporary directory and overwrite files anywhere on the system. The vulnerability affects Nuclio Dashboard versions 1.15.27 and earlier. The exploit, hosted on GitHub by user mdvpat, demonstrates how attackers could leverage this flaw to gain root-level file system access. This is particularly concerning as Nuclio is a serverless platform often used in production environments, making the vulnerability a potential entry point for system compromise. Organizations using affected versions should prioritize patching or implementing mitigations to prevent unauthorized file writes that could lead to further exploitation. The PoC's availability increases the urgency for remediation as malicious actors may quickly weaponize the exploit.