CVE-2026-85201: Eclipse Ankaios Agent DOS Vulnerability

CVE-2026-85201 Overview

CVE-2026-85201 affects Eclipse Ankaios versions 0.1.0 through 1.0.1. The Ankaios agent fails to bound the declared length of length-delimited protobuf messages received over the Control Interface FIFO. A workload granted Control Interface access can declare an excessive message length, triggering an unbounded memory allocation that aborts the agent process. The resulting crash removes orchestration services for every workload managed by that agent. The vulnerability is tracked under [CWE-789: Memory Allocation with Excessive Size Value].

Critical Impact
A single malicious or compromised workload with Control Interface access can crash the Ankaios agent and terminate orchestration for all co-located workloads.

Affected Products

Eclipse Ankaios 0.1.0 through 1.0.1
Ankaios agent component (Control Interface FIFO handler)
Deployments exposing the Control Interface to workloads

Discovery Timeline

2026-09-07 - CVE-2026-85201 published to NVD
2026-09-08 - Last updated in NVD database

Technical Details for CVE-2026-85201

Vulnerability Analysis

Eclipse Ankaios is an orchestrator for containerized and native workloads on embedded and edge devices. Workloads communicate with the agent through the Control Interface, a named pipe (FIFO) that carries length-delimited protobuf messages. Each message begins with a varint declaring the payload length, followed by the serialized protobuf body.

The agent reads the declared length and allocates a buffer of that size before validating the incoming payload. Because no upper bound is enforced, a workload can advertise a payload of arbitrary size. The resulting allocation request exceeds available memory, and the Rust runtime aborts the agent process on allocation failure.

When the agent aborts, orchestration control for every workload assigned to that agent is lost. The scope is confined to the local node, but the availability impact on that node is high.

Root Cause

The root cause is missing validation of the length prefix in the Control Interface reader. The agent trusts workload-supplied metadata and calls the underlying allocator without a configurable maximum message size. This maps directly to [CWE-789].

Attack Vector

Exploitation requires local access as a workload that has been granted Control Interface permissions. The attacker crafts a length-delimited protobuf frame with an inflated varint length field and writes it to the Control Interface FIFO. The agent reads the length, attempts the allocation, and terminates. No authentication challenge, network access, or user interaction is required beyond the pre-existing workload privileges.

// No verified public proof-of-concept is available.
// See the Eclipse security advisory and pull request #791 for
// technical details of the fix and the affected code path.

Detection Methods for CVE-2026-85201

Indicators of Compromise

Unexpected termination or abort of the ank-agent process on managed nodes
Kernel or systemd log entries showing out-of-memory (OOM) events tied to the agent
Workloads transitioning to an unmanaged or stale state after agent crash
Repeated agent restart cycles correlated with a specific workload writing to the Control Interface FIFO

Detection Strategies

Monitor the Ankaios agent process for abnormal exits, restarts, and allocation-failure signals
Correlate agent crashes with Control Interface activity from individual workloads to identify the offending source
Track resident set size (RSS) spikes on the agent process immediately preceding termination
Alert on repeated large-length protobuf frames written to the Control Interface FIFO

Monitoring Recommendations

Collect journalctl output for the Ankaios agent unit and forward to a central log store
Enable cgroup memory accounting per workload to identify workloads triggering allocator pressure
Baseline expected Control Interface message sizes and alert on outliers
Review workload manifests periodically to confirm Control Interface access is granted only where required

How to Mitigate CVE-2026-85201

Immediate Actions Required

Upgrade Ankaios to version 1.0.2 or later, which enforces a bounded message length in the Control Interface reader
Audit workload manifests and revoke Control Interface access from workloads that do not require it
Restart the Ankaios agent on affected nodes after applying the upgrade to load the patched binary
Restrict the ability to deploy or modify workloads to trusted operators until the upgrade is complete

Patch Information

The fix is delivered in Eclipse Ankaios v1.0.2. The code change is available in Ankaios Pull Request #791 and shipped in the Ankaios v1.0.2 release. Additional advisory context is published in the Eclipse Security Vulnerability Report.

Workarounds

Remove Control Interface access from untrusted workloads by setting controlInterfaceAccess: deny in the workload specification
Run workloads under stricter cgroup memory limits so allocation attempts fail inside the workload before pressuring the agent
Isolate high-risk workloads on dedicated agent instances to contain the blast radius of an agent abort
Monitor and automatically restart the Ankaios agent through the service manager to reduce downtime while patching is scheduled

bash

# Configuration example: deny Control Interface access for an untrusted workload
# workload.yaml
workloads:
  untrusted_app:
    runtime: podman
    agent: agent_A
    controlInterfaceAccess:
      denyRules:
        - type: StateRule
          operation: ReadWrite
          filterMask: ["*"]