CVE-2026-127078

HighCVSS 7.1/10Last modified Nov 13, 2026

Description

OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to attach another application's environment to their service by supplying a foreign project_env_id. Attackers can configure CI and trigger builds and deployments through the component env endpoints using the other application's configuration, registries and deployment infrastructure.

Metrics

CVSS 3.1 7.1/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:H/A:N

Weakness enumeration

CWE-639

Affected software

No affected versions have been published.

Timeline

Published: Nov 13, 2026
Last modified: Nov 13, 2026
NVD status: Deferred

Related CVEs from 2026

CVE-2026-1270797.4OpsTree BuildPiper before 2.7.0 lacks rate limiting on password-reset OTP verification, allowing unauthenticated attackers to brute force 6-CVE-2026-127088.7Summary Cloudflare tokio-quiche was found to contain an uncontrolled resource consumption vulnerability in its HTTP/3 DATAGRAM handling. F CVE-2026-1270809.9OpsTree BuildPiper before 2.7.0 contains an improper authorization vulnerability that allows authenticated deploy users to define arbitrary CVE-2026-1270814.3OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to link pipeline stages to en CVE-2026-1270827.7Huginn before 2026.11.09 contains an information exposure vulnerability in JqAgent that allows authenticated users to read the server proces CVE-2026-1270836.4Huginn from 2026.09.09 before 2026.11.09 contains a server-side request forgery vulnerability because OutboundProxy.configure! applies the e CVE-2026-1270847.3Teable before 2026-10-12T12-45-53Z.3331 contains a stored cross-site scripting vulnerability that allows authenticated users to upload SVG o CVE-2026-1270854.3Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to remove entries from other users' collec CVE-2026-1270866.3Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to take over other users' collections by s CVE-2026-1270873.1Ryot before 10.5.6 contains an authorization bypass vulnerability that allows authenticated users to revoke other users' access links by sup CVE-2026-1270888.12FAuth before 9.0.1 contains a weak password recovery vulnerability that allows unauthenticated attackers to poison reset links by forging t CVE-2026-1270908.8Jadaptive Maverick Synergy Server before 3.0.33 and 3.1.x before 3.1.7, and Maverick Legacy Server before 1.8.1, contain an authentication b