CVE-2026-127074

OpsTree BuildPiper before 2.7.0 contains a path traversal vulnerability that allows authenticated users with build configuration permission to read files on the build worker by supplying unvalidated dockerfilepath and build context values. Attackers can set traversal or absolute paths such as...

CVE-2026-127074

OpsTree BuildPiper versions prior to 2.7.0 are vulnerable to a path traversal vulnerability. Authenticated users with build configuration permissions can read files on the build worker by providing unvalidated dockerfile_path and build context values via the CI configuration endpoint. By supplyin...

EUVD-2026-125108

OpsTree BuildPiper before 2.7.0 contains a path traversal vulnerability that allows authenticated users with build configuration permission to read files on the build worker by supplying unvalidated dockerfilepath and build context values. Attackers can set traversal or absolute paths such as...