THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-33211 (CRITICAL 9.6) — Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.1, 1.3.3, 1.6.1, 1.9.2, and 1.10.2, the Tekton Pipelines git resolver is vulnerable to path traversal via the `pathInRepo` parameter. A t

[NVD] CVE-2026-33211 (CRITICAL 9.6) — Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.1, 1.3.3, 1.6.1, 1.9.2, and 1.10.2, the Tekton Pipelines git resolver is vulnerable to path traversal via the `pathInRepo` parameter. A t

lownvdPublished 2026-03-24

CVE-2026-33211 CVSS: 9.6 CRITICAL Published: 2026-03-24T00:16:29.320

Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.1, 1.3.3, 1.6.1, 1.9.2, and 1.10.2, the Tekton Pipelines git resolver is vulnerable to path traversal via the `pathInRepo` parameter. A tenant with permission to create `ResolutionRequest

Indicators of compromise

CVE-2026-33211cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-33211