CVE-2026-127073

CRITICAL 9.9

OpsTree BuildPiper before 2.7.0 Privilege Escalation via Additional Manifest

CVSS Score

9.9

EPSS Score

0.0%

EPSS Percentile

0th

OpsTree BuildPiper before 2.7.0 contains a privilege escalation vulnerability that allows project users to gain Kubernetes cluster-admin rights by submitting unrestricted manifests through the Additional Manifest feature. Attackers can deploy a ClusterRoleBinding binding a service account to cluster-admin, which the pipeline applies with cluster-wide credentials, granting control over all workloads and secrets.

CWE	CWE-269
Vendor	opstree solutions
Product	buildpiper
Published	Nov 13, 2026

Stay Ahead of the Next One

Get instant alerts for opstree solutions buildpiper

Be the first to know when new critical vulnerabilities affecting opstree solutions buildpiper are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

OpsTree Solutions / BuildPiper

0 < 2.7.0

References

NVD ↗ CVE.org ↗ EPSS Data ↗

gist.github.com: https://gist.github.com/neelkotnis/7bc715e190e5be2c2fc5be15c4035ce7 buildpiper.io: https://www.buildpiper.io/ vulncheck.com: https://www.vulncheck.com/advisories/opstree-buildpiper-before-2.7.0-privilege-escalation-via-additional-manifest

Credits

Neel Saurabh Kotnis