CVE-2026-54168— Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution
Quick assessment
Affected
tektoncd pipelines-as-code
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Pipelines-as-Code 是一种 CI/CD 系统，允许用户在源代码仓库中定义 Tekton 流水线。在 0.37.8、0.39.6、0.42.1 和 0.48.0 版本之前，当 GitHub App 安装在多个仓库上时，在处理 webhook 期间创建的 GitHub App 安装令牌（installation token）并未被限定到触发该事件的特定仓库。拥有某个仓库推送权限的用户可以提交一个 PipelineRun，其中包含 远程任务注解，该注解指向同一安装范围内的一个私有仓库。当 函数未返回显式的
Possible ATT&CK Techniques 1 AI
T1190 · Exploit Public-Facing Application
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-54168
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Pipelines-as-Code: Unscoped GitHub App installation token allows unauthorized access to private repositories via remote task resolution
Source: CVE Program / CVE List V5
Vulnerability Description
Pipelines-as-Code is a CI/CD system that lets users define Tekton pipelines in source code repositories. Prior to 0.37.8, 0.39.6, 0.42.1, and 0.48.0, a GitHub App installation token created during webhook processing is not scoped to the repository that triggered the event when the App is installed across multiple repositories. A user with push access to one repository can submit a PipelineRun containing a pipelinesascode.tekton.dev/task remote task annotation that targets a private repository in the same installation. When ScopeTokenToListOfRepos returns no explicit scope, the missing triggering repository ID leaves the token able to access the entire installation. Pipelines-as-Code resolves and inlines the remote private task with that token, disclosing the repository's Tekton definitions. The demonstrated impact is read-only and does not provide write access. This issue is fixed in versions 0.37.8, 0.39.6, 0.42.1, and 0.48.0.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
特权管理不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| tektoncd | pipelines-as-code | < 0.37.8 | - |
|
II. Public POCs for CVE-2026-54168
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-54168
请登录查看更多情报信息。
Vendor Pages for CVE-2026-54168 (4)
-
🔗 Release v0.42.1 · tektoncd/pipelines-as-code · GitHub x_refsource_MISC
-
-
-
IV. Related Vulnerabilities
Same vendor: tektoncd
-
CVE-2026-54167
Pipelines-as-Code GitHub App token request can be redirected -
CVE-2026-40923
Tekton Pipelines: VolumeMount path restriction bypass via mi -
CVE-2026-40924
Tekton Pipelines: HTTP Resolver Unbounded Response Body Read -
CVE-2026-40938
Tekton Pipelines: Git Resolver Unsanitized Revision Paramete -
CVE-2026-40161
Tekton Pipelines: Git resolver API mode leaks system-configu
Same weakness: CWE-269
-
CVE-2026-55225
Strimzi: Cross-namespace privilege escalation via `Kafka.spe -
CVE-2026-55226
Strimzi: Unrestricted access to all Secrets within namespace -
CVE-2026-65831
ArcadeDB: Privilege escalation via reader role in /api/v1/co -
CVE-2026-61549
Woodpecker: Privilege escalation via unrestricted serviceAcc -
CVE-2026-14805
Consulting - Business, Finance WordPress Theme <= 6.7.16 - A
V. Comments for CVE-2026-54168
No comments yet