{"id":"CVE-2026-50240","published":"2026-11-06T22:17:58.757","lastModified":"2026-11-10T09:17:22.533","description":"A flaw was found in OpenShift Pipelines-as-Code (PAC). PAC does not verify whether the creator of a Repository custom resource has permission to create PipelineRuns. A namespace user with only Repository and Secret create/delete permissions can cause PAC to execute attacker-controlled PipelineRuns as the auto-provisioned pipeline ServiceAccount, which carries ClusterRole/edit by default. This results in namespace-scoped privilege escalation, enabling Secret read, resource creation/modification/deletion, and potential supply chain injection in CI/CD namespaces.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-862"],"vendors":[],"products":[],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-50240","tags":[]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2484752","tags":[]},{"url":"https://github.com/openshift-pipelines/pipelines-as-code/commit/ac1ff2337fce1ffdf888f513c6202caa95853927","tags":[]},{"url":"https://github.com/tektoncd/pipelines-as-code/security/advisories/GHSA-8m5v-wh4r-5j96","tags":[]}],"exploitRefs":[{"url":"https://github.com/openshift-pipelines/pipelines-as-code/commit/ac1ff2337fce1ffdf888f513c6202caa95853927","tags":[]},{"url":"https://github.com/tektoncd/pipelines-as-code/security/advisories/GHSA-8m5v-wh4r-5j96","tags":[]}],"hasPoc":true,"ai":{"summary":"OpenShift Pipelines-as-Code (PAC) lacks authorization checks when creating Repository custom resources, allowing low-privileged users to trigger PipelineRuns executed with elevated ServiceAccount permissions (ClusterRole/edit). This enables namespace-scoped privilege escalation, letting attackers read Secrets, modify/delete resources, and inject malicious code into CI/CD pipelines.","exploitability":"Exploitation requires only namespace-level create/delete permissions on Repository and Secret resources, with no user interaction or complex conditions beyond standard cluster access.","blast_radius":"Successful exploitation allows full compromise of the target namespace, including credential theft via Secret access and supply chain poisoning by injecting malicious pipeline steps.","remediation":"Upgrade to OpenShift Pipelines-as-Code version 2.590 or later, which implements proper RBAC validation for Repository-to-PipelineRun creation flows.","detection":"Monitor for PipelineRun resources created with 'pipelines-as-code' annotations where the triggering Repository custom resource was created by a user lacking explicit permission to create PipelineRuns; inspect PAC controller logs for unauthorized reconciliation events and verify ServiceAccount binding mismatches in namespace-scoped ClusterRoleBindings.","tags":["privilege-escalation","rbac-bypass","ci-cd-compromise","supply-chain-injection","kubernetes"],"model":"garnet-coder","analyzedAt":"2026-11-08T09:52:13.090Z"}}