Threats tagged 'ghsa-mc52-3fjj-rqqq'

1 threat

Severity	CVSS	Threat	Source	Published	Score and star
Critical	9.4	CVE-2026-127080OpsTree BuildPiper before 2.7.0 contains an improper authorization vulnerability that allows authenticated deploy Critical9.42026-11-13GCVE DatabaseCVE-2026-127080 OpsTree BuildPiper versions before 2.7.0 have an improper authorization vulnerability that allows authenticated deploy users to define arbitrary Kubernetes hostPath volumes without restrictions. This flaw enables attackers to mount the worker node root filesystem with read-write access, breaking container isolation and potentially leading to node and cluster compromise. Report on CVE-2026-127080 Vulnerability CWE-269 #ghsa-mc52-3fjj-rqqq	GCVE Database	2026-11-13

Page 1 of 1