Skip to content
OpenAdvisories

Vendor

spinnaker

9 known vulnerabilities.

Products

spinnaker 9
All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • Critical 10.0
    CVE-2026-32613

    Spinnaker vulnerable to RCE via expression parsing due to unrestricted context handling

    Spinnaker is an open source, multi-cloud continuous delivery platform. Echo like some other services, uses SPeL (Spring Expression Language) to process information - specifically around expected artifacts. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, an…

    spinnaker spinnaker io.spinnaker.echo:echo-pipelinetriggers Maven
  • Critical 10.0
    CVE-2026-32604 Public exploit

    Spinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths

    Spinnaker is an open source, multi-cloud continuous delivery platform. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2, a bad actor can execute arbitrary commands very simply on the clouddriver pods. This can expose credentials, remove files, …

    spinnaker spinnaker io.spinnaker.clouddriver:clouddriver-artifacts-gitrepo Maven
  • Critical 10.0
    CVE-2021-43832

    Improper Access Control in spinnaker

    Spinnaker is an open source, multi-cloud continuous delivery platform. Spinnaker has improper permissions allowing pipeline creation & execution. This lets an arbitrary user with access to the gate endpoint to create a pipeline and execute it without authenti…

    spinnaker spinnaker