Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- Security bypass
- Confidentiality · integrity · availability
- None · High · None
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub. Impact type from CWE-290.
Summary
Woodpecker is a CI/CD engine. Starting in version 3.0.0 and prior to version 3.14.1, a vulnerability in Woodpecker CI's gRPC layer allowed any authenticated agent to impersonate any other agent on the same server by injecting a forged `agent_id` value into outgoing gRPC metadata. The server correctly verified the JWT token but then discarded the verified agent identity in favor of the client-supplied value. Version 3.14.1 patches the issue. As a workaround, disable org agents (`WOODPECKER_DISABLE_USER_AGENT_REGISTRATION=true`) and delete existing ones.
Why it matters now
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| woodpecker-ci | woodpecker | 3.0.0 to before 3.14.1 | 3.14.1 | Patch available | CNA |
| — | go.woodpecker-ci.org/woodpecker/v3 (Go) | 3.0.0 to before 3.14.1 | 3.14.1 | Patch available | GHSA-g7mm-9vx7-jm7h |
- woodpecker Vendorwoodpecker-ci Affected 3.0.0 to before 3.14.1 Fixed in 3.14.1 Patch available CNA
- go.woodpecker-ci.org/woodpecker/v3 (Go) Vendor— Affected 3.0.0 to before 3.14.1 Fixed in 3.14.1 Patch available GHSA-g7mm-9vx7-jm7h
CPE names Threatist (inferred) · 1
Inferred from how NVD named this product before; not given by a source.
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:* | — | — | woodpecker-ci |
- cpe:2.3:a:woodpecker-ci:woodpecker:*:*:*:*:*:*:*:* Versions — — ·woodpecker-ci
Remediation
- Fix · CNA woodpecker (woodpecker-ci) Fixed in 3.14.1
- Fix · GHSA-g7mm-9vx7-jm7h go.woodpecker-ci.org/woodpecker/v3 (Go) Fixed in 3.14.1 Advisory →
Timeline
- 2026-10-02 Threatist record created from CVE-2026-50141
- 2026-10-03 Alias added: GHSA-g7mm-9vx7-jm7h
References
Other 6
- https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-g7mm-9vx7-jm7h
- https://github.com/woodpecker-ci/woodpecker-security/issues/21
- https://github.com/woodpecker-ci/woodpecker/issues/6541
- https://github.com/woodpecker-ci/woodpecker/pull/6567
- https://github.com/woodpecker-ci/woodpecker/pull/6569
- https://github.com/woodpecker-ci/woodpecker
More woodpecker-ci vulnerabilities
- TI-2026-42001 Woodpecker < 3.15.0 - GitLab Approval Gate Bypass via Spoofable Commit Author Name CVSS 4.0CRITICAL 9.2
- TI-2026-44104 Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend CVSS 4.0CRITICAL 9.0
- TI-2024-27474 Custom environment variables allow to alter execution flow of plugins in Woodpecker CVSS 3.1HIGH 8.8
- TI-2024-27473 Custom workspace allow to overwrite plugin entrypoint executable in Woodpecker CVSS 3.1HIGH 8.8
- TI-2023-20924 Repositoty takeover in woodpecker-ci CVSS 3.1HIGH 8.1
- TI-2026-42000 NULL pointer dereference in woodpecker-ci woodpecker CVSS 4.0MEDIUM 6.9
Sources
- CVE-2026-50141 · CVE Program
- CVE-2026-50141 · NVD
- FIRST EPSS
- GHSA-g7mm-9vx7-jm7h · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences