Critical severity · published Mar 23, 2026
CVE-2026-33211
Tekton Pipelines git resolver has path traversal that allows reading arbitrary files from the resolver pod
9.6
CVSS
0.6%
EPSS
No
On KEV
Description
Tekton Pipelines project provides k8s-style resources for declaring CI/CD-style pipelines. Starting in version 1.0.0 and prior to versions 1.0.1, 1.3.3, 1.6.1, 1.9.2, and 1.10.2, the Tekton Pipelines git resolver is vulnerable to path traversal via the `pathInRepo` parameter. A tenant with permission to create `ResolutionRequests` (e.g. by creating `TaskRuns` or `PipelineRuns` that use the git resolver) can read arbitrary files from the resolver pod's filesystem, including ServiceAccount tokens. The file contents are returned base64-encoded in `resolutionrequest.status.data`. Versions 1.0.1, 1.3.3, 1.6.1, 1.9.2, and 1.10.2 contain a patch.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
None
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.6% · higher than 48% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
PI
pipeline · tektoncd
>= 1.0.0, < 1.0.1; >= 1.1.0, < 1.3.3; >= 1.4.0, < 1.6.1; >= 1.7.0, < 1.9.2; >= 1.10.0, < 1.10.2 · source: vendor
TP
Tekton Pipelines · Linuxfoundation
1.1.0 before 1.3.3; 1.4.0 before 1.6.1; 1.7.0 before 1.9.2; 1.10.0 before 1.10.2; 1.0.0 · source: NVD
BF
Builds for Red Hat OpenShift 1.6.0 · Red Hat
All versions, or not specified · source: CISA
OP
OpenShift Pipelines · Red Hat
All versions, or not specified · source: CISA
OS
OpenShift Serverless · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat OpenShift Builds 1.7.3 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat OpenShift Pipelines 1.2 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat OpenShift Pipelines 1.21 · Red Hat
All versions, or not specified · source: CISA
RH
Red Hat Trusted Artifact Signer 1.3 · Red Hat
All versions, or not specified · source: CISA
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-33211
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-33211
Patch
https://github.com/tektoncd/pipeline/commit/10fa538f9a2b6d01c75138f1ed7ba3da0e34687c
Patch
https://github.com/tektoncd/pipeline/commit/318006c4e3a5
Patch
https://github.com/tektoncd/pipeline/commit/3ca7bc6e6dd1d97f80b84f78370d91edaf023cbd
Patch
https://github.com/tektoncd/pipeline/commit/961388fcf3374bc7656d28ab58ca84987e0a75ae
Patch
https://github.com/tektoncd/pipeline/commit/b1fee65b88aa969069c14c120045e97c37d9ee5e
Patch
https://github.com/tektoncd/pipeline/commit/cdb4e1e97a4f3170f9bc2cbfff83a6c8107bc3db
More from pipeline
8.5
CVE-2026-40938
Tekton Pipelines: Git Resolver Unsanitized Revision Parameter Enables git Argument Injection Leading to RCE
6.5
CVE-2026-40924
Tekton Pipelines: HTTP Resolver Unbounded Response Body Read Enables Denial of Service via Memory Exhaustion
6.5
CVE-2026-40161
Tekton Pipelines: Git resolver API mode leaks system-configured API token to user-controlled serverURL
6.5
CVE-2026-25542
Tekton Pipelines: VerificationPolicy regex pattern bypass via substring matching
6.5
CVE-2026-33022
Tekton Pipelines: Controller can panic when setting long resolver names in TaskRun/PipelineRun