CVE-2026-55632

The continuous delivery server GoCD is affected by an authorization bypass vulnerability in the internal pipeline structure API (versions 20.2.0 through 26.1.0). The API, which is used for autocompletion when editing configurations like pipelines, templates, environments, and user preferences, in...

CVE-2026-55632 GoCD is vulnerable to authorization bypass via pipeline structure API

GoCD is a continuous deliver server. From 20.2.0 until 26.1.0, the internal pipeline structure API used for autocompletion while editing pipeline, template, environment, and user-preference configuration returns its users-and-roles mode to regular authenticated users without requiring an...