CVE-2026-127077

OpsTree BuildPiper versions prior to 2.7.0 are vulnerable to an authorization bypass in the Environment Creation API. The flaw allows authenticated users to create environments on unassigned Kubernetes clusters by tampering with cluster_id and namespaces values during a POST request to /api/v1/pr...