Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-eq…

Özet

Türkçe özeti henüz hazır değil; şimdilik kaynağın kendi açıklamasını gösteriyoruz.

A flaw was found in OpenShift Pipelines-as-Code (PAC). PAC does not verify whether the creator of a Repository custom resource has permission to create PipelineRuns. A namespace user with only Repository and Secret create/delete permissions can cause PAC to execute attacker-controlled PipelineRuns as the auto-provisioned pipeline ServiceAccount, which carries ClusterRole/edit by default. This results in namespace-scoped privilege escalation, enabling Secret read, resource creation/modification/deletion, and potential supply chain injection in CI/CD namespaces.

Etkilenen sürümler5 yazılım

Kaynaklar4 kaynak

• CVE.org kaydı
• NVD kaydı
• bugzilla.redhat.com/show_bug.cgi Üçüncü taraf
• access.redhat.com/security/cve/CVE-2026-50240 Diğer

Kayıt geçmişi

1. 7 Kas 2026 00:53Yayımlandı

İlgili açıklar

• 7,7 CVE-2026-107912Quarkus quarkus-vertx-http bileşeninde yönetim arayüzünde yetkilendirme atlatma açığı
• 5,9 CVE-2026-94619FileGator: Missing authorization in POST /upload allows cross-user read and deletion of temporary files
• 5,4 CVE-2026-94618FileGator: Missing authorization in GET /batchdownload allows cross-user retrieval of another user's archive
• 5,9 CVE-2026-77442Ryot: `createOrUpdateUserIntegration` trusts a client-supplied `integrationId` with no ownership check, letting any u…
• 6,5 CVE-2026-85737Velociraptor: Low-priv analyst reads arbitrary server files via ungated sql() VQL plugin
• 6,5 CVE-2026-634372FAuth: Missing Authorization on Share Recipients Endpoint Allows Cross-User Account Enumeration