Skip to content
OpenAdvisories

Product · OpsTree Solutions

BuildPiper

9 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Medium 5.3
    CVE-2026-127074

    OpsTree BuildPiper before 2.7.0 contains a path traversal vulnerability that allows authenticated users with build conf…

    OpsTree Solutions BuildPiper
  • Medium 6.5
    CVE-2026-127076

    OpsTree BuildPiper before 2.7.0 Broken Access Control via git_repo API

    OpsTree BuildPiper before 2.7.0 contains a broken access control vulnerability that allows authenticated users to list and build from Git repositories restricted to other projects. Attackers can enumerate repositories via GET /api/v1/git_repo/?all=true and su…

    OpsTree Solutions BuildPiper
  • Medium 4.3
    CVE-2026-127081

    OpsTree BuildPiper before 2.7.0 Authorization Bypass via Pipeline Stage project_env_id

    OpsTree BuildPiper before 2.7.0 contains an authorization bypass vulnerability that allows authenticated users to link pipeline stages to environments of other projects by supplying a foreign project_env_id. Attackers can submit another project's environment …

    OpsTree Solutions BuildPiper