GHSA-g64m-6hp6-x57pHighCVSS 6.5
OpsTree BuildPiper before 2.7.0 contains a path traversal vulnerability that allows authenticated...
🔗 CVE IDs covered (1)
📋 Description
OpsTree BuildPiper before 2.7.0 contains a path traversal vulnerability that allows authenticated users to read arbitrary files by supplying traversal sequences in Additional Manifest file paths. Attackers can enter paths like ../../../../etc/passwd so the renderer embeds file contents in generated manifests and logs, exposing configuration files and service-account tokens.
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-127075
- https://gist.github.com/neelkotnis/ce44dc92c964b43008eb714343e4de82
- https://www.buildpiper.io
- https://www.vulncheck.com/advisories/opstree-buildpiper-before-2.7.0-path-traversal-via-additional-manifest-rendering
- https://github.com/advisories/GHSA-g64m-6hp6-x57p