ETK-2026-3610Zero's internal tracking ID, independent of the CVE number.

{
  "etk_id": "ETK-2026-3610",
  "cve_id": null,
  "display_id": "ETK-2026-3610",
  "ghsa_id": "GHSA-mm72-wr37-26pv",
  "euvd_id": null,
  "status": "published",
  "anchor_state": "awaiting_cve",
  "title": "Container privilege escalation in harnessrouter Docker image",
  "summary": "HarnessRouter Docker images from 0.13.20 through 0.37.16 allow the agent account to modify files or configuration later used by root processes. An attacker who has already obtained code execution as that account can gain root access within the container when it restarts.",
  "mitigation": "Upgrade the harnessrouter/harnessrouter Docker image to version 0.37.17. Replace affected deployed image tags and restart containers using the updated image.",
  "vendor": "other",
  "product": "other:harnessrouter/harnessrouter (Docker image)",
  "affected": [
    {
      "affected_notes": [],
      "affected_ranges": [
        "<= 0.37.16"
      ],
      "ecosystem": "other",
      "fixed_versions": [
        "0.37.17"
      ],
      "package_name": "harnessrouter/harnessrouter (Docker image)",
      "purl": null
    }
  ],
  "cwes": [
    427
  ],
  "cvss_score": 8.5,
  "cvss_src": "cna_vendor",
  "cvss_vector": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H",
  "epss_score": null,
  "epss_percentile": null,
  "epss_asof": null,
  "automation": "deterministic",
  "check": true,
  "check_confidence_basis": "differential",
  "exploit": false,
  "pipeline_minutes": 13.80191545,
  "t0_at": null,
  "signals": {
    "check": {
      "at": "2026-11-05T10:05:38.646847+00:00",
      "days": -0.3114011014236111,
      "is_lower_bound": true,
      "measured_at": "2026-11-05T17:34:03.736939+00:00",
      "url": null
    },
    "trigger_signal": {
      "at": "2026-11-04T00:51:41+00:00",
      "days": -1.6960960880787037,
      "is_lower_bound": true,
      "measured_at": "2026-11-05T17:34:03.736939+00:00",
      "url": "https://github.com/HarnessRouter/harnessrouter/security/advisories/GHSA-mm72-wr37-26pv"
    }
  }
}