Skip to content
OpenAdvisories

Vendor

spinnaker

9 known vulnerabilities.

Products

spinnaker 9
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Critical 10.0
    CVE-2026-32604 Public exploit

    Spinnaker vulnerable to RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths

    Spinnaker is an open source, multi-cloud continuous delivery platform. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2, a bad actor can execute arbitrary commands very simply on the clouddriver pods. This can expose credentials, remove files, …

    spinnaker spinnaker io.spinnaker.clouddriver:clouddriver-artifacts-gitrepo Maven