Read the docs
TI-2026-29590 Aliases CVE-2026-40938GHSA-94jr-7pqp-xhcq

Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE

Priority HIGH 72CWE-88Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
High
Impact type
Code execution
Confidentiality · integrity · availability
High · High · High
Fix status
Partial Red Hat: 4 fixed, 1 without a fix

Attack profile from CVSS 3.1 · NVD. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-88.

Summary

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1, the git resolver's revision parameter is passed directly as a positional argument to git fetch without any validation that it does not begin with a - character. Because git parses flags from mixed positional arguments, an attacker can inject arbitrary git fetch flags such as --upload-pack=<binary>. Combined with the validateRepoURL function explicitly permitting URLs that begin with / (local filesystem paths), a tenant who can submit ResolutionRequest objects can chain these two behaviors to execute an arbitrary binary on the resolver pod. The tekton-pipelines-resolvers ServiceAccount holds cluster-wide get/list/watch on all Secrets, so code execution on the resolver pod enables full cluster-wide secret exfiltration. Versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, and 1.11.1 fix the issue.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00788 56th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial pipeline (tektoncd): 1.0.2, 1.3.4, 1.6.2 +2github.com/tektoncd/pipeline (Go): 1.11.1, 1.9.3, 1.6.2 +2Red Hat: 7 advisoriesRed Hat: 4 fixed, 1 without a fix

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
backstagepipeline1.0.0 to before 1.0.2; 1.2.0 to before 1.3.4; 1.4.0 to before 1.6.2; 1.7.0 to before 1.9.3; 1.10.0 to before 1.11.11.0.2, 1.3.4, 1.6.2, 1.9.3, 1.11.1Patch availableCNA
—github.com/tektoncd/pipeline (Go)1.10.0 to before 1.11.11.11.1Patch availableGHSA-94jr-7pqp-xhcq
—github.com/tektoncd/pipeline (Go)1.7.0 to before 1.9.31.9.3Patch availableGHSA-94jr-7pqp-xhcq
—github.com/tektoncd/pipeline (Go)1.4.0 to before 1.6.21.6.2Patch availableGHSA-94jr-7pqp-xhcq
—github.com/tektoncd/pipeline (Go)1.2.0 to before 1.3.41.3.4Patch availableGHSA-94jr-7pqp-xhcq
—github.com/tektoncd/pipeline (Go)1.0.0 to before 1.0.21.0.2Patch availableGHSA-94jr-7pqp-xhcq
  • pipeline Vendorbackstage Affected 1.0.0 to before 1.0.2; 1.2.0 to before 1.3.4; 1.4.0 to before 1.6.2; 1.7.0 to before 1.9.3; 1.10.0 to before 1.11.1 Fixed in 1.0.2, 1.3.4, 1.6.2, 1.9.3, 1.11.1 Patch available CNA
  • github.com/tektoncd/pipeline (Go) Vendor— Affected 1.10.0 to before 1.11.1 Fixed in 1.11.1 Patch available GHSA-94jr-7pqp-xhcq
  • github.com/tektoncd/pipeline (Go) Vendor— Affected 1.7.0 to before 1.9.3 Fixed in 1.9.3 Patch available GHSA-94jr-7pqp-xhcq
  • github.com/tektoncd/pipeline (Go) Vendor— Affected 1.4.0 to before 1.6.2 Fixed in 1.6.2 Patch available GHSA-94jr-7pqp-xhcq
  • github.com/tektoncd/pipeline (Go) Vendor— Affected 1.2.0 to before 1.3.4 Fixed in 1.3.4 Patch available GHSA-94jr-7pqp-xhcq
  • github.com/tektoncd/pipeline (Go) Vendor— Affected 1.0.0 to before 1.0.2 Fixed in 1.0.2 Patch available GHSA-94jr-7pqp-xhcq

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:linuxfoundation:tekton_pipelines:*:*:*:*:*:go:*:*1.0.0 to before 1.11.0Vulnerablebackstage
  • cpe:2.3:a:linuxfoundation:tekton_pipelines:*:*:*:*:*:go:*:* Versions 1.0.0 to before 1.11.0 Vulnerable ·backstage

Remediation

  • Fix · CNA pipeline (tektoncd) Fixed in 1.0.2, 1.3.4, 1.6.2, 1.9.3, 1.11.1
  • Fix · GHSA-94jr-7pqp-xhcq github.com/tektoncd/pipeline (Go) Fixed in 1.11.1 Advisory →
  • Fix · GHSA-94jr-7pqp-xhcq github.com/tektoncd/pipeline (Go) Fixed in 1.9.3 Advisory →
  • Fix · GHSA-94jr-7pqp-xhcq github.com/tektoncd/pipeline (Go) Fixed in 1.6.2 Advisory →
  • Fix · GHSA-94jr-7pqp-xhcq github.com/tektoncd/pipeline (Go) Fixed in 1.3.4 Advisory →
  • Fix · GHSA-94jr-7pqp-xhcq github.com/tektoncd/pipeline (Go) Fixed in 1.0.2 Advisory →

Red Hat 7 advisories

  • RHSA-2026:89131 Released 2026-10-24 · Red Hat rating Critical
    Red Hat OpenShift Builds 1.9.2
    • Red Hat OpenShift Builds 1.9.2 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10 +6
  • RHSA-2026:89041 Released 2026-10-24 · Red Hat rating Important
    Red Hat OpenShift Builds 1.9.2
    • Red Hat OpenShift Builds 1.9.2 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel10, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel10, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel10 +7
  • RHSA-2026:26538 Released 2026-06-17 · Red Hat rating Important
    Red Hat OpenShift Pipelines Release 1.21.2
    • Red Hat OpenShift Pipelines 1.21 registry.redhat.io/openshift-pipelines/pipelines-operator-bundle
Show 4 more Red Hat advisories
  • RHSA-2026:26519 Released 2026-06-17 · Red Hat rating Important
    Red Hat OpenShift Pipelines Release 1.21.2
    • Red Hat OpenShift Pipelines 1.21 registry.redhat.io/openshift-pipelines/pipelines-resolvers-rhel9, registry.redhat.io/openshift-pipelines/pipelines-results-api-rhel9, registry.redhat.io/openshift-pipelines/pipelines-rhel9-operator
  • RHSA-2026:24484 Released 2026-06-08 · Red Hat rating Important
    Red Hat OpenShift Pipelines Release 1.21.2
    • Red Hat OpenShift Pipelines 1.21 serve-tkn-cli-1-21-serve-tkn-cli-1.21.1@amd64, serve-tkn-cli-1-21-serve-tkn-cli-1.21.1@amd64_darwin, serve-tkn-cli-1-21-serve-tkn-cli-1.21.1@amd64_windows +5
  • RHSA-2026:24359 Released 2026-06-08 · Red Hat rating Important
    Red Hat OpenShift Builds 1.7.3
    • Red Hat OpenShift Builds 1.7.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +4
  • RHSA-2026:17546 Released 2026-05-14 · Red Hat rating Important
    Red Hat OpenShift Builds 1.8.0
    • Red Hat OpenShift Builds 1.8.3 registry.redhat.io/openshift-builds/openshift-builds-controller-rhel9, registry.redhat.io/openshift-builds/openshift-builds-git-cloner-rhel9, registry.redhat.io/openshift-builds/openshift-builds-image-bundler-rhel9 +3

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
OpenShift PipelinesAffectedNo fix yet
Red Hat OpenShift Builds 1.7.3Fixed RHSA-2026:24359
Red Hat OpenShift Builds 1.8.3Fixed RHSA-2026:17546
Red Hat OpenShift Builds 1.9.2Fixed RHSA-2026:89041, RHSA-2026:89131
Red Hat OpenShift Pipelines 1.21Fixed RHSA-2026:24484, RHSA-2026:26519, RHSA-2026:26538
Not affected: 10 products
  • OpenShift Lightspeed
  • OpenShift Pipelines
  • OpenShift Serverless
  • Red Hat OpenShift AI (RHOAI)
  • Red Hat OpenShift Builds 1.7.3
  • Red Hat OpenShift Builds 1.8.3
  • Red Hat OpenShift Builds 1.9.2
  • Red Hat OpenShift Pipelines 1.21
  • Red Hat OpenShift Virtualization 4
  • Red Hat Trusted Artifact Signer

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-40938
  2. 2026-10-03 Alias added: GHSA-94jr-7pqp-xhcq
  3. 2026-10-25 Fix available: RHSA-2026:89131 · Red Hat
  4. 2026-10-25 Fix available: RHSA-2026:89041 · Red Hat
  5. 2026-10-25 Fix available: Red Hat OpenShift Builds 1.8.3, Red Hat OpenShift Builds 1.9.2 · Red Hat

References

Exploit 1

Advisory 1

Other 10

  • TI-2026-29578 Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion CVSS 3.1MEDIUM 6.5
  • TI-2023-18894 Pipelines do not validate child UIDs CVSS 3.1MEDIUM 4.3
  • TI-2026-25632 Tekton Pipelines git resolver has path traversal that allows reading arbitrary files from the resolver pod CVSS 3.1CRITICAL 9.6
  • TI-2026-28976 Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL CVSS 3.1HIGH 7.7
  • TI-2026-25468 Tekton Pipelines: Controller can panic when setting long resolver names in TaskRun/PipelineRun CVSS 3.1MEDIUM 6.5
  • TI-2026-20651 Tekton Pipelines: VerificationPolicy regex pattern bypass via substring matching CVSS 3.1MEDIUM 6.5
See all 7 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences