CVE-2026-40161High· 7.7▾ TwilightA flaw was found in Tekton Pipelines. A tenant with permissions to create TaskRun or PipelineRun resources can exploit this vulnerability. By omitting the Git API token parameter and pointing the serverURL to an attacker-controlled endpoin…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 7.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.3%
0.3% → 0.4%
Last analysed / modified upstream
— → 7.7
none → high
A flaw was found in Tekton Pipelines. A tenant with permissions to create TaskRun or PipelineRun resources can exploit this vulnerability. By omitting the Git API token parameter and pointing the serverURL to an attacker-controlled endpoint, the system-configured Git API token (such as a GitHub Personal Access Token or GitLab token) can be sent to the attacker. This information disclosure allows for the exfiltration of sensitive API tokens.
github.com/tektoncd/pipeline: Tekton Pipelines: Information disclosure of Git API token via user-controlled serverURL — rated Moderate by Red Hat. Released 2026-04-21, updated 2026-10-25.
Affected:
Fixed:
No fix planned:
Not affected:
It is recommended that existing users of Red Hat OpenShift Builds 1.7.2 upgrade to 1.7.3 https://access.redhat.com/errata/RHSA-2026:24359 It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2 https://access.redhat.com/errata/RHSA-2026:89041 It is recommended that existing users of Red Hat OpenShift Builds 1.9.z upgrade to 1.9.2 https://access.redhat.com/errata/RHSA-2026:89131
Workarounds / mitigations:
Affected packages:
github.com/tektoncd/pipeline >= 1.10.0, < 1.11.1Patched in:
github.com/tektoncd/pipeline 1.11.1Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-116192Medium· 5.9github.com/rclone/rclone: rclone: Information disclosure via Server-Side Request Forgery in rc-serve (CVE-2026-116192)
CVE-2026-114406Medium· 6.8Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
CVE-2026-17557Medium· 6.5Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding
CVE-2026-114145High· 7.5GitPython: GitPython: arbitrary code execution via improper submodule path validation (CVE-2026-114145)
CVE-2025-15613Medium· 6.5Kyverno before v1.13.4 is vulnerable to server-side request forgery (SSRF) via its Service Call functionality
CVE-2026-116140Low· 3.3ImageMagick: ImageMagick: Security policy bypass via flawed delegate invocation parsing (CVE-2026-116140)