Skip to content

CVE record · 1 source

CVE-2026-127077

CVSS 7.1

OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to create environments on unassigned…

Vendor: OpsTree Solutions
Product: BuildPiper
CVSS v3.1: 7.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Weakness: CWE-862
Exposure class: Developer platform

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

30

CVE NVD 11h ago

OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to create environments on unassigned…

OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to create environments on unassigned Kubernetes clusters by tampering with cluster_id and namespaces values. Attackers…

CVSS 7.1 CVE-2026-127077 OpsTree Solutions