Tekton Pipelines versions 1.0.0 up to but not including 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1 contain a vulnerability where the git resolver's revision parameter is passed directly as a positional argument to the git fetch command without validation against arguments starting with '-'. This allows injection of arbitrary git fetch flags. Combined with the validateRepoURL function permitting repository URLs starting with '/', an attacker with permission to submit ResolutionRequest objects can execute arbitrary binaries on the resolver pod. The resolver pod's ServiceAccount has cluster-wide permissions to get/list/watch all Secrets, enabling full secret exfiltration. Exploitation complexity is high, requiring knowledge of valid local git repository paths or default URL configurations. The vulnerability is tracked as CWE-88 (Improper Neutralization of Argument Delimiters in a Command).

Successful exploitation allows an authenticated user to execute arbitrary code on the resolver pod, leading to full exfiltration of cluster-wide secrets. This compromises the confidentiality and integrity of the OpenShift environment and may enable privilege escalation or lateral movement within the Kubernetes cluster. The vulnerability affects cluster security critically due to the broad permissions of the resolver pod's ServiceAccount.

According to the Red Hat advisory, no official fix or patch meeting their criteria is currently available. Users are advised to upgrade to fixed versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, or 1.11.1 where the issue is resolved. If upgrading is not immediately possible, consider restricting the ability to submit ResolutionRequest objects to trusted users only, as exploitation requires authenticated access. Monitor vendor advisories for updates on official patches or mitigations.