A crafted namespace header can bypass Nuclio's earlier command-injection fix and turn a local Docker dashboard into host-level root access.