Wwoodpecker-ci

Products

Exploited and recent CVEs

• CVE-2026-61549 Critical 9.0 Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend 0.3%
• CVE-2026-58370 High 8.1 Woodpecker < 3.15.0 - GitLab Approval Gate Bypass via Spoofable Commit Author Name 0.7%
• CVE-2026-58369 Medium 5.3 Woodpecker < 3.15.0 - Unauthenticated NULL Pointer Dereference in /api/orgs/lookup Enables Log-Flooding Denial of Service 0.6%
• CVE-2026-50141 High 7.1 Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation 0.4%
• CVE-2024-41122 High 7.5 Custom environment variables allow to alter execution flow of plugins in Woodpecker 0.6%
• CVE-2024-41121 High 8.8 Custom workspace allow to overwrite plugin entrypoint executable in Woodpecker 0.7%
• CVE-2023-40034 High 8.1 Repositoty takeover in woodpecker-ci 0.9%