Critical · published September 13, 2022
🚨 Docker breakout alert! A sneaky vulnerability in OneDev allows regular users to hijack CI/CD jobs and control the Docker daemon, potentially granting them root access! 🔥 This is like giving a restaurant server the master key to the kitchen; they can not only serve meals but also concoct anything in the kitchen — potentially poisoning the entire establishment! An attacker could exploit this vulnerability to gain full control over the host machine, allowing them to alter builds and inject malicious code into Docker images. With root privileges, the possibilities are dangerously expansive, making it a recipe for absolute chaos in your build environment!
This is like giving a restaurant server the master key to the kitchen; they can not only serve meals but also concoct anything in the kitchen — potentially poisoning the entire establishment! The vulnerability arises from Docker sockets being mounted into CI/CD job executors in OneDev, allowing users with project creation permissions to access and control the Docker daemon on the host system.
An attacker could exploit this vulnerability to gain full control over the host machine, allowing them to alter builds and inject malicious code into Docker images. With root privileges, the possibilities are dangerously expansive, making it a recipe for absolute chaos in your build environment! Upgrade to OneDev version 7.3.0 or higher immediately to mitigate this risk. Ensure that permissions for project creation are tightly controlled and limit access to trusted users only. 🔒 You've got this! Follow these steps to secure your OneDev instance and protect your infrastructure! 🛡️