{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-40923", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-04-15T20:40:15.517Z", "datePublished": "2026-04-21T20:50:53.742Z", "dateUpdated": "2026-04-22T13:51:13.268Z"}, "containers": {"cna": {"title": "Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ check", "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "lang": "en", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}}], "references": [{"name": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-rx35-6rhx-7858", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-rx35-6rhx-7858"}, {"name": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1", "tags": ["x_refsource_MISC"], "url": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1"}], "affected": [{"vendor": "tektoncd", "product": "pipeline", "versions": [{"version": "< 1.11.1", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-04-21T20:50:53.742Z"}, "descriptions": [{"lang": "en", "value": "Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Prior to 1.11.1, a validation bypass in the VolumeMount path restriction allows mounting volumes under restricted /tekton/ internal paths by using .. path traversal components. The restriction check uses strings.HasPrefix without filepath.Clean, so a path like /tekton/home/../results passes validation but resolves to /tekton/results at runtime. This vulnerability is fixed in 1.11.1."}], "source": {"advisory": "GHSA-rx35-6rhx-7858", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-04-22T13:50:48.955785Z", "id": "CVE-2026-40923", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-22T13:51:13.268Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-40923", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-04-22T13:50:48.955785Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-04-22T13:51:03.320Z"}}], "cna": {"title": "Tekton Pipelines: VolumeMount path restriction bypass via missing filepath.Clean in /tekton/ check", "source": {"advisory": "GHSA-rx35-6rhx-7858", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 5.4, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "tektoncd", "product": "pipeline", "versions": [{"status": "affected", "version": "< 1.11.1"}]}], "references": [{"url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-rx35-6rhx-7858", "name": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-rx35-6rhx-7858", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1", "name": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Prior to 1.11.1, a validation bypass in the VolumeMount path restriction allows mounting volumes under restricted /tekton/ internal paths by using .. path traversal components. The restriction check uses strings.HasPrefix without filepath.Clean, so a path like /tekton/home/../results passes validation but resolves to /tekton/results at runtime. This vulnerability is fixed in 1.11.1."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-04-21T20:50:53.742Z"}}}, "cveMetadata": {"cveId": "CVE-2026-40923", "state": "PUBLISHED", "dateUpdated": "2026-04-22T13:51:13.268Z", "dateReserved": "2026-04-15T20:40:15.517Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-04-21T20:50:53.742Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Prior to 1.11.1, a validation bypass in the VolumeMount path restriction allows mounting volumes under restricted /tekton/ internal paths by using .. path traversal components. The restriction check uses strings.HasPrefix without filepath.Clean, so a path like /tekton/home/../results passes validation but resolves to /tekton/results at runtime. This vulnerability is fixed in 1.11.1."}], "id": "CVE-2026-40923", "lastModified": "2026-04-21T21:16:45.543", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 5.4, "baseSeverity": "MEDIUM", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "LOW", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N", "version": "3.1"}, "exploitabilityScore": 2.8, "impactScore": 2.5, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2026-04-21T21:16:45.543", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/tektoncd/pipeline/releases/tag/v1.11.1"}, {"source": "security-advisories@github.com", "url": "https://github.com/tektoncd/pipeline/security/advisories/GHSA-rx35-6rhx-7858"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "security-advisories@github.com", "type": "Primary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,1.11.1)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "pipeline", "source": "cna", "vendor": "tektoncd"}, "product": "pipeline", "vendor": "tektoncd"}], "analysis": {"en": {"generated_at": "2026-04-22T06:24:08.351427+00:00", "value": {"mitigation_remediation": ["Upgrade Tekton Pipelines to version 1.11.1 or later.", "Verify that all existing Pipeline resources are using voluntary volume mounts within /tekton/ and adjust any that use traversal constructs to comply with the latest validation rules.", "Restrict the ability to create or modify Pipeline tasks and VolumeMount definitions to trusted users or namespaces to limit potential exploit exposure."], "summary": {"action": "Patch Now", "impact": "Confidentiality & Integrity"}, "threat_synthesis": {"affected_systems": "Tekton Pipelines (tektoncd:pipeline). All releases prior to 1.11.1 are affected. The vulnerability is fixed starting with pipeline release v1.11.1.", "description_and_impact": "A validation bug in Tekton Pipelines before version 1.11.1 allows an attacker to mount volumes under the protected /tekton/ internal directories by using path traversal components that bypass the mount\u2011path check. The check incorrectly relies on strings.HasPrefix without normalizing the path, so inputs such as /tekton/home/../results pass validation but resolve to /tekton/results at runtime. This can expose internal data or allow an attacker to place malicious files in locations that the pipeline assumes are safe, potentially compromising pipeline integrity and confidentiality of secret data.", "risk_and_exploitability": "The CVSS score of 5.4 indicates moderate severity. No EPSS score is available, and the vulnerability is not listed in the CISA KEV catalog. Exploitation requires the ability to supply a task definition (or other resource) that contains a VolumeMount with a path designed to traverse beyond /tekton/. The attacker does not need network access to the host; the vulnerability is local to the Kubernetes cluster where Tekton Pipelines is running."}}}}, "created": "2026-04-22T03:45:06.830948+00:00", "updated": "2026-04-22T06:30:10.673347+00:00", "vendors": ["tektoncd", "tektoncd$PRODUCT$pipeline"]}