Skip to content

CVE record · 1 source

CVE-2026-127078

CVSS 7.1

OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to attach another application's…

Vendor: OpsTree Solutions
Product: BuildPiper
CVSS v3.1: 7.1 AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N
Weakness: CWE-639

Coverage

1

Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.

25

CVE NVD 11h ago

OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to attach another application's…

OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to attach another application's environment to their service by supplying a foreign project_env_id. Attackers can…

CVSS 7.1 CVE-2026-127078 OpsTree Solutions