github.com/woodpecker-ci/woodpecker

3 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Critical 9.0

CVE-2026-61549

Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend

Woodpecker is a CI/CD engine. From 1.0.0 until 3.16.0, pipeline/backend/kubernetes/backend_options.go defines backend_options.kubernetes.serviceAccountName, and the Kubernetes backend in pipeline/backend/kubernetes/pod.go copies that pipeline-step value direc…

woodpecker-ci woodpecker go.woodpecker-ci.org/woodpecker go.woodpecker-ci.org/woodpecker/v2 Go

Sep 15, 2026