CVE-2026-86836
Received Received - Intake

Predictable Path FIFO Creation in Eclipse Ankaios

Publication date: 2026-09-14

Last updated on: 2026-09-14

Assigner: Eclipse Foundation

Description
In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload files and Control Interface named pipes (FIFOs) under a predictable path derived from the agent name and a hash of the workload's runtime configuration. If a directory or FIFO already exists at that path when the agent (re)starts, the agent reuses it based only on an existence and/or file-type check, without validating its owner or permissions. A local, unprivileged user with write access to the same base directory (by default under `$TMPDIR/ankaios`, e.g. shared `/tmp`) can pre-create this path hierarchy, including the two Control Interface FIFOs, before the agent starts. The agent then treats the attacker-owned FIFOs as the legitimate Control Interface for the targeted workload. The attacker can complete the Control Interface handshake and issue requests using that workload's configured `controlInterfaceAccess` permissions, allowing impersonation of the workload and, depending on its configured permissions, unauthorized reading and/or modification of the cluster's desired state.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published
2026-09-14
Last Modified
2026-09-14
Generated
2026-09-14
AI Q&A
2026-09-14
EPSS Evaluated
N/A
NVD
CVE-2026-86836
EUVD
EUVD-2026-77703

Affected Vendors & Products

Showing 1 associated CPE
Vendor Product Version / Range
eclipse ankaios From 0.1.0 (inc) to 1.0.2 (inc)

Helpful Resources

Exploitability

CWE
CWE Icon
KEV
KEV Icon
CWE ID Description
CWE-276 During installation, installed file permissions are set to allow anyone to modify those files.
CWE-379 The product creates a temporary file in a directory whose permissions allow unintended actors to determine the file's existence or otherwise access that file.
CWE-367 The product checks the state of a resource before using that resource, but the resource's state can change between the check and the use in a way that invalidates the results of the check.

Attack-Flow Graph

AI Quick Actions

Instant insights powered by AI
Executive Summary

This vulnerability affects Eclipse Ankaios versions 0.1.0 through 1.0.2. The agent creates workload files and Control Interface named pipes under a predictable path based on the agent name and a hash of the workload's runtime configuration. If a directory or FIFO already exists at that path when the agent starts, it reuses it without validating ownership or permissions. A local attacker with write access to the base directory can pre-create this path, including the FIFOs, and trick the agent into using the attacker-owned FIFOs as the legitimate Control Interface. This allows the attacker to impersonate the workload and issue unauthorized requests.

Detection Guidance

Check for pre-existing directories or FIFOs under $TMPDIR/ankaios with predictable paths based on agent names and workload hashes. Look for unexpected Control Interface FIFOs owned by unprivileged users in shared /tmp directories.

Impact Analysis

If you use Eclipse Ankaios versions 0.1.0 through 1.0.2, an attacker with local access could impersonate workloads, read or modify the cluster's desired state, and perform unauthorized actions. This could lead to data breaches, service disruption, or unauthorized access to sensitive information.

Compliance Impact

This vulnerability could lead to unauthorized access or modification of sensitive data, which may violate GDPR's data integrity and confidentiality requirements or HIPAA's security rules. Organizations using affected versions may face compliance violations, legal penalties, and reputational damage.

Mitigation Strategies

Upgrade to a patched version of Eclipse Ankaios beyond 1.0.2. Ensure $TMPDIR/ankaios directories are not shared or writable by unprivileged users. Validate ownership and permissions of all paths before agent startup.

Chat Assistant

Ask questions about this CVE
Hi! I’m here to help you understand CVE-2026-86836. Ask me anything about the vulnerability, its impact, or mitigation strategies.
0/70

EPSS Chart