Read the docs
TI-2026-28976 Aliases CVE-2026-40161GHSA-wjxp-xrpv-xpff

Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL

Priority LOW 33CWE-201Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Information disclosure
Confidentiality · integrity · availability
High · None · None
Fix status
Partial Red Hat: 3 fixed, 3 without a fix

Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-201.

Summary

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, the Tekton Pipelines git resolver in API mode sends the system-configured Git API token to a user-controlled serverURL when the user omits the token parameter. A tenant with TaskRun or PipelineRun create permission can exfiltrate the shared API token (GitHub PAT, GitLab token, etc.) by pointing serverURL to an attacker-controlled endpoint. Versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1 fix the issue.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.0026 17th percentileScored 2026-11-07
Fix Partial pipeline (tektoncd): 1.0.2, 1.3.4, 1.6.2 +2github.com/tektoncd/pipeline (Go): 1.0.2, 1.3.4, 1.6.2 +2Red Hat: 4 advisoriesRed Hat: 3 fixed, 3 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
backstagepipeline1.0.0 to before 1.0.2; 1.2.0 to before 1.3.4; 1.4.0 to before 1.6.2; 1.7.0 to before 1.9.3; 1.10.0 to before 1.11.11.0.2, 1.3.4, 1.6.2, 1.9.3, 1.11.1Patch availableCNA
—github.com/tektoncd/pipeline (Go)1.0.0 to before 1.0.21.0.2Patch availableGHSA-wjxp-xrpv-xpff
—github.com/tektoncd/pipeline (Go)1.2.0 to before 1.3.41.3.4Patch availableGHSA-wjxp-xrpv-xpff
—github.com/tektoncd/pipeline (Go)1.4.0 to before 1.6.21.6.2Patch availableGHSA-wjxp-xrpv-xpff
—github.com/tektoncd/pipeline (Go)1.7.0 to before 1.9.31.9.3Patch availableGHSA-wjxp-xrpv-xpff
—github.com/tektoncd/pipeline (Go)1.10.0 to before 1.11.11.11.1Patch availableGHSA-wjxp-xrpv-xpff
  • pipeline Vendorbackstage Affected 1.0.0 to before 1.0.2; 1.2.0 to before 1.3.4; 1.4.0 to before 1.6.2; 1.7.0 to before 1.9.3; 1.10.0 to before 1.11.1 Fixed in 1.0.2, 1.3.4, 1.6.2, 1.9.3, 1.11.1 Patch available CNA
  • github.com/tektoncd/pipeline (Go) Vendor— Affected 1.0.0 to before 1.0.2 Fixed in 1.0.2 Patch available GHSA-wjxp-xrpv-xpff
  • github.com/tektoncd/pipeline (Go) Vendor— Affected 1.2.0 to before 1.3.4 Fixed in 1.3.4 Patch available GHSA-wjxp-xrpv-xpff
  • github.com/tektoncd/pipeline (Go) Vendor— Affected 1.4.0 to before 1.6.2 Fixed in 1.6.2 Patch available GHSA-wjxp-xrpv-xpff
  • github.com/tektoncd/pipeline (Go) Vendor— Affected 1.7.0 to before 1.9.3 Fixed in 1.9.3 Patch available GHSA-wjxp-xrpv-xpff
  • github.com/tektoncd/pipeline (Go) Vendor— Affected 1.10.0 to before 1.11.1 Fixed in 1.11.1 Patch available GHSA-wjxp-xrpv-xpff

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:linuxfoundation:tekton_pipelines:*:*:*:*:*:go:*:*1.0.0 – 1.10.0Vulnerablebackstage
  • cpe:2.3:a:linuxfoundation:tekton_pipelines:*:*:*:*:*:go:*:* Versions 1.0.0 – 1.10.0 Vulnerable ·backstage

Remediation

  • Fix · CNA pipeline (tektoncd) Fixed in 1.0.2, 1.3.4, 1.6.2, 1.9.3, 1.11.1
  • Fix · GHSA-wjxp-xrpv-xpff github.com/tektoncd/pipeline (Go) Fixed in 1.0.2 Advisory →
  • Fix · GHSA-wjxp-xrpv-xpff github.com/tektoncd/pipeline (Go) Fixed in 1.3.4 Advisory →
  • Fix · GHSA-wjxp-xrpv-xpff github.com/tektoncd/pipeline (Go) Fixed in 1.6.2 Advisory →
  • Fix · GHSA-wjxp-xrpv-xpff github.com/tektoncd/pipeline (Go) Fixed in 1.9.3 Advisory →
  • Fix · GHSA-wjxp-xrpv-xpff github.com/tektoncd/pipeline (Go) Fixed in 1.11.1 Advisory →

Red Hat 4 advisories

  • RHSA-2026:89131 Released 2026-10-24 · Red Hat rating Critical
    Red Hat OpenShift Builds 1.9.2
    • Red Hat OpenShift Builds 1.9.2 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10 +6
  • RHSA-2026:89041 Released 2026-10-24 · Red Hat rating Important
    Red Hat OpenShift Builds 1.9.2
    • Red Hat OpenShift Builds 1.9.2 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10 +7
  • RHSA-2026:24484 Released 2026-06-08 · Red Hat rating Important
    Red Hat OpenShift Pipelines Release 1.21.2
    • Red Hat OpenShift Pipelines 1.21 serve-tkn-cli-1-21-serve-tkn-cli-1.21.1@amd64, serve-tkn-cli-1-21-serve-tkn-cli-1.21.1@amd64_darwin, serve-tkn-cli-1-21-serve-tkn-cli-1.21.1@amd64_windows +5
Show 1 more Red Hat advisories
  • RHSA-2026:24359 Released 2026-06-08 · Red Hat rating Important
    Red Hat OpenShift Builds 1.7.3
    • Red Hat OpenShift Builds 1.7.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +4

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Builds for Red Hat OpenShiftAffectedNo fix yet
OpenShift PipelinesAffectedNo fix yet
Red Hat OpenShift Virtualization 4AffectedNo fix planned: Out of support scope
Red Hat OpenShift Builds 1.7.3Fixed RHSA-2026:24359
Red Hat OpenShift Builds 1.9.2Fixed RHSA-2026:89041, RHSA-2026:89131
Red Hat OpenShift Pipelines 1.21Fixed RHSA-2026:24484
Not affected: 8 products
  • OpenShift Lightspeed
  • OpenShift Pipelines
  • OpenShift Serverless
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift Builds 1.7.3
  • Red Hat OpenShift Builds 1.9.2
  • Red Hat OpenShift Virtualization 4
  • Red Hat Trusted Artifact Signer

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-40161
  2. 2026-10-03 Alias added: GHSA-wjxp-xrpv-xpff
  3. 2026-10-25 Fix available: RHSA-2026:89131 · Red Hat
  4. 2026-10-25 Fix available: RHSA-2026:89041 · Red Hat
  5. 2026-10-25 Fix available: Red Hat OpenShift Builds 1.9.2 · Red Hat

References

Advisory 2

Other 3

  • TI-2026-29590 Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE CVSS 3.1HIGH 8.5
  • TI-2026-29578 Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion CVSS 3.1MEDIUM 6.5
  • TI-2023-18894 Pipelines do not validate child UIDs CVSS 3.1MEDIUM 4.3
  • TI-2026-25632 Tekton Pipelines git resolver has path traversal that allows reading arbitrary files from the resolver pod CVSS 3.1CRITICAL 9.6
  • TI-2026-25468 Tekton Pipelines: Controller can panic when setting long resolver names in TaskRun/PipelineRun CVSS 3.1MEDIUM 6.5
  • TI-2026-20651 Tekton Pipelines: VerificationPolicy regex pattern bypass via substring matching CVSS 3.1MEDIUM 6.5
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences