Security readout for executives and security teams
Plain-English summary
Inspektor Gadget, a Kubernetes inspection tool, contains a flaw in its image-building feature that lets a malicious build manifest run arbitrary commands on the host or container performing the build. The risk centers on automated pipelines that build untrusted gadget images. Upgrading to version 0.51.1 resolves the issue.
Executive priority
Patch on the next standard maintenance window for teams using Inspektor Gadget in CI/CD that processes external gadget manifests; lower urgency for operator-only use. No evidence of active exploitation, but the path from manifest to code execution is direct enough to warrant prompt action where build automation is exposed.
Technical view
The `ig image build` subcommand renders a `Makefile.build` template using values from the `buildOptions` field of a YAML gadget manifest without sufficient escaping. An attacker controlling the manifest can inject shell metacharacters that execute during make invocation. With `--local`, commands run on the host; otherwise they run inside the build container. CWE-77/CWE-78 command injection. Fixed in 0.51.1.
Likely exposure
Limited to environments that build Inspektor Gadget OCI gadget images from manifests sourced from untrusted contributors, such as CI/CD systems validating community or pull-request gadgets. Interactive operators building only first-party manifests face minimal exposure.
Exploitation context
CVSS 4.0 score 6.6 with exploit maturity Proof-of-Concept per the published vector. Not listed in CISA KEV and no public reports of in-the-wild exploitation are cited in the source bundle. Attack requires control over the build YAML or its `buildOptions` values.
Researcher notes
Root cause is unsanitized interpolation of `buildOptions` values into the `Makefile.build` template used by `cmd/common/image/build.go`. Entry point is the YAML manifest; impact pivots on whether `--local` is set (host vs build container). Fix lands in 0.51.1; review the two referenced commits for the escaping change. Consider detection via CI artifact diffing of generated Makefiles and alerting on unusual shell metacharacters in `buildOptions` strings.
Mitigation direction
- Upgrade Inspektor Gadget `ig` to version 0.51.1 or later across all build hosts and CI runners.
- Restrict who can submit or modify `build.yml` manifests fed to `ig image build` in pipelines.
- Run gadget builds inside isolated, ephemeral containers without host credentials or persistent secrets.
- Avoid the `--local` flag when building manifests from untrusted or external sources.
- Review CI/CD workflows that auto-build community gadgets and add manifest review gates.
Validation and detection
- Inventory hosts and pipelines running `ig` and capture the installed version via `ig version`.
- Confirm package or container image references resolve to Inspektor Gadget 0.51.1 or newer after upgrade.
- Audit CI logs for `ig image build` invocations and identify the source of supplied `build.yml` files.
- Verify pull-request workflows do not build untrusted manifests with `--local` against shared runners.
- Cross-check vendor advisory GHSA-79qw-g77v-2vfh and the linked fix commits for any backport guidance.
Public sources used
Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.
Conservative CVE-to-ATT&CK context
These mappings and lookup hints may be relevant to the vulnerability behavior, CWE, affected product, or exposure path. Glexia-inferred context is not an official MITRE, ATT&CK, CWE, or CVE Program mapping.
ATT&CK lookup starting points
Use these exact CWE pages and searches to review the Glexia ATT&CK library from this CVE's weakness and description context.
CWE-77: Command execution behavior lookup
Command injection weaknesses can lead defenders to review execution techniques and command interpreter telemetry. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupCWE-78: Command execution behavior lookup
Command injection weaknesses can lead defenders to review execution techniques and command interpreter telemetry. Open the exact CWE lookup page first, then review the ATT&CK searches from that MITRE weakness context. This is a Glexia lookup hint, not an official ATT&CK mapping.
Open ATT&CK lookupExecution behavior lookup
The CVE wording references code or command execution, so execution technique review may help defensive triage. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupContainer behavior lookup
The affected technology mentions containers, so container-specific ATT&CK technique review may help. This is a Glexia inferred lookup path, not an official MITRE, ATT&CK, or CVE Program mapping.
Open ATT&CK lookupCVE-2026-24905 mapping review
Open the CVE-to-ATT&CK bridge for reviewed, inferred, or future official mappings tied to this CVE.
Open ATT&CK lookup- Severity
- Medium
- CVSS
- 6.6 (4.0)
- Known Exploited
- No
- Published
Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
CNA and ADP enrichment extracted from CVE v5
These fields come from the CVE record and ADP containers, not from Glexia's Take. They preserve time-varying source decisions such as CISA SSVC, KEV status, CVSS metrics, and provider references.
CVSS vector scores
1 official scoreWe collect every scored CVSS vector available in the official CNA and ADP containers. When more than one version is present, the table keeps the source vectors side by side instead of collapsing them into the highest score.
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P——Primary CVE scoreVulnerability scoring details
Base CVSS 4.0 score
6.6MediumVector: CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P
Source materials
- CVE List V5 sourceCVE List V5
- https://github.com/inspektor-gadget/inspektor-gadget/security/advisories/GHSA-79qw-g77v-2vfhCVE reference · x_refsource_CONFIRM
- https://github.com/inspektor-gadget/inspektor-gadget/commit/7c83ad84ff7a68565655253e2cf1c5d2da695c1aCVE reference · x_refsource_MISC
- https://github.com/inspektor-gadget/inspektor-gadget/commit/d9bf2fe4a180dad33ce57ca793ff4799ee7b8320CVE reference · x_refsource_MISC
Products and packages named in the record
CWE details
CWE links open Glexia weakness intelligence pages with official CWE context, developer remediation guidance, and related CVE mappings.
Improper Neutralization of Special Elements used in a Command ('Command Injection')
Improper Neutralization of Special Elements used in a Command ('Command Injection') represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') represents a recurring weakness pattern that can create exploitable paths when design, validation, or implementation controls are missing.