Loading story…
Spinnaker patched two high-severity remote code execution vulnerabilities that could let attackers run arbitrary commands in core services of the multi-cloud continuous delivery platform. CVE-2026-32604 affects deployments using gitrepo artifact types, where improper sanitization of user-controlled branch names and paths can lead to command execution on clouddriver pods, potentially exposing credentials, deleting files, or injecting resources into the environment.
A second flaw, CVE-2026-32613, impacts the Echo service through unsafe Spring Expression Language handling for expected artifacts, allowing unrestricted access to Java classes and enabling command execution, file access, and broader system compromise. The issues were fixed in Spinnaker versions 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2; organizations that cannot patch immediately can reduce risk by disabling gitrepo artifact types and, for the Echo issue, disabling Echo entirely.
See affected versions and whether adversaries are exploiting it.
2 events from the most recent confirmed update back to the earliest known activity.
Spinnaker patched CVE-2026-32613 in versions 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2 after unsafe Spring Expression Language handling in the Echo service exposed unrestricted JVM access. For unpatched deployments, administrators were advised to disable Echo entirely.
Spinnaker released versions 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2 to patch CVE-2026-32604, a vulnerability that allowed arbitrary command execution on clouddriver pods via improper sanitization of gitrepo artifact branch and path input. As a temporary mitigation, users were advised to disable gitrepo artifact types.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See whether adversaries are exploiting this yet, and where the affected versions run in your environment.
5 references tracked. Mallory keeps watching after this page renders.
ccb.belgium.be
Open sourcereddit.com
Open sourcecvefeed.io
Open sourcecvefeed.io
Open sourcebugflation.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Jenkins released security updates in **Jenkins 2.576** and **LTS 2.568.2** to address multiple vulnerabilities, including **CVE-2026-70426**, a critical Remoting deserialization filter bypass that can let agent processes, code running on agents, or users with `Agent/Connect` permission bypass JEP-200 protections and potentially achieve code execution on the controller. The advisory also covers core flaws that can enable arbitrary file write leading to controller code execution, an impersonation issue tied to case-insensitive usernames and groups, and unsafe project naming strategy object instantiation. Jenkins said the Remoting issue affects Jenkins 2.575 and earlier and LTS 2.568.1 and earlier, and was fixed in Remoting `3385.vf1123fb_515da_`. The same advisory disclosed serious plugin vulnerabilities, led by **CVE-2026-70431** and **CVE-2026-70432** in the **Multijob Plugin**, where Groovy scripting and a CSRF weakness can allow users with `Item/Create` or `Item/Configure` permissions to execute arbitrary code in the Jenkins controller JVM. Additional plugin issues include credential enumeration and capture paths, unauthorized workspace file access, a timing side channel in Webhook Secret Credentials Provider Plugin, stored XSS, misuse of system-scoped credentials, and an XXE flaw in Ivy Report Plugin. Jenkins also warned that several plugin vulnerabilities had **no fix available** at publication time, affecting plugins including AWS CodeBuild, CodeSonar, Google Chat Notification, Horreum, Ivy Report, Parameterized Remote Trigger, Qualys Container Scanning Connector, Sauce OnDemand, Summary Display, Violation Comments to GitLab, and XML Job to Job DSL.
Aug 6, 2026
GitLab disclosed and remediated three high-severity vulnerabilities in GitLab CE/EE that could be exploited by unauthenticated attackers under certain conditions. **CVE-2026-4922** is a cross-site request forgery flaw (`CWE-352`) that could let an attacker trigger GraphQL mutations as an authenticated user, while **CVE-2026-5262** is a cross-site scripting issue (`CWE-79`) that could expose tokens in the Storybook development environment. GitLab also fixed **CVE-2026-5816**, an improper path validation flaw (`CWE-41`) that could allow arbitrary JavaScript execution in a victim’s browser session. The issues affect multiple GitLab CE/EE release lines, with patched versions identified as **18.9.6**, **18.10.4**, and **18.11.1** depending on the flaw. CVE-2026-4922 affects versions from `17.0` before `18.9.6`, `18.10` before `18.10.4`, and `18.11` before `18.11.1`; CVE-2026-5262 affects versions from `16.1.0` before `18.9.6`, `18.10` before `18.10.4`, and `18.11` before `18.11.1`; and CVE-2026-5816 affects `18.10` before `18.10.4` and `18.11` before `18.11.1`. The vulnerabilities carry CVSS v3.1 ratings reflecting high confidentiality and integrity impact, and GitLab linked the disclosures to its patch release notice, internal work items, and HackerOne reports.
Jun 29, 2026
Several open source projects disclosed serious vulnerabilities affecting developer and infrastructure tooling, including remote code execution, SQL injection, server-side request forgery, prompt-driven query injection, and path traversal. **Coder Workspace Agent** patched `GHSA-QRWJ-VH9X-GW5V`, a cross-agent SSRF flaw that let an authenticated attacker controlling one workspace agent abuse HTTP `307`/`308` redirects to replay privileged requests to another agent, enabling cross-tenant file access, file writes, and command execution; fixes were released in versions `v2.34.4`, `v2.33.10`, `v2.32.9`, and `v2.29.19 ESR`. **Coolify** disclosed a critical authenticated command injection issue tied to unsafe handling of deployment fields such as `dockerfile_location`, allowing RCE and secrets exposure through deployment logs, while **OpenRemote** fixed `GHSA-cgfv-jrfp-2r7v`, an authenticated SQL injection bug in datapoint crosstab export that could expose other tenants’ data, Keycloak configuration, and encrypted credentials. Additional disclosures affected AI and package-management components. **Langroid** fixed a prompt-injection-driven flaw in `Neo4jChatAgent` that executed LLM-generated Cypher without validation, allowing unauthorized graph operations and possible OS-level impact when dangerous Neo4j procedures were enabled; the issue was resolved in version `0.65.5` with new safety controls that were also extended to `ArangoChatAgent`. **pnpm** also reported a path traversal weakness in `configDependencies` processing from `pnpm-lock.yaml`, where a malicious repository could force symlink creation outside `node_modules/.pnpm-config` even with `--ignore-scripts`, creating a filesystem write primitive within or potentially beyond the project directory.
Jul 10, 2026