GHSA-j8x6-g54c-3wg2CriticalCVSS 9.9
OpsTree BuildPiper before 2.7.0 contains a privilege escalation vulnerability that allows project...
🔗 CVE IDs covered (1)
📋 Description
OpsTree BuildPiper before 2.7.0 contains a privilege escalation vulnerability that allows project users to gain Kubernetes cluster-admin rights by submitting unrestricted manifests through the Additional Manifest feature. Attackers can deploy a ClusterRoleBinding binding a service account to cluster-admin, which the pipeline applies with cluster-wide credentials, granting control over all workloads and secrets.
🔗 References (5)
- https://nvd.nist.gov/vuln/detail/CVE-2026-127073
- https://gist.github.com/neelkotnis/7bc715e190e5be2c2fc5be15c4035ce7
- https://www.buildpiper.io
- https://www.vulncheck.com/advisories/opstree-buildpiper-before-2.7.0-privilege-escalation-via-additional-manifest
- https://github.com/advisories/GHSA-j8x6-g54c-3wg2