A critical argument injection vulnerability in Tekton Pipelines allows an authenticated attacker to achieve remote code execution and compromise sensitive cluster secrets.

The git resolver fails to sanitize the revision parameter, allowing an attacker to inject arbitrary git fetch flags. When chained with local filesystem path support, an authenticated tenant can execute arbitrary binaries on the resolver pod, granting access to cluster-wide secrets.

This vulnerability poses a severe risk to CI/CD integrity and infrastructure security. By gaining code execution on the resolver pod, an attacker can access the tekton-pipelines-resolvers ServiceAccount, resulting in the exfiltration of all secrets within the Kubernetes cluster. Given the CVSS score of 7.5, this high-severity flaw necessitates immediate attention to prevent unauthorized access to sensitive credentials and potential supply chain compromise.

Immediate Action: Upgrade to versions 1.0.2, 1.3.4, 1.6.2, 1.9.3, or 1.11.1 as appropriate for your current deployment branch.

Proactive Monitoring: Audit Kubernetes audit logs for suspicious ResolutionRequest objects and monitor the resolver pod for unauthorized process execution or unexpected outbound network connections.

Compensating Controls: Restrict permissions for creating ResolutionRequest objects to trusted users and implement network policies to isolate the resolver pod from sensitive internal services.

Public Exploit Available: Unknown

The vulnerability represents a significant risk to the security of your CI/CD environment. Organizations utilizing affected versions of Tekton Pipelines must prioritize patching to the latest secure release immediately. Failure to update may allow an authenticated attacker to compromise the entire cluster, necessitating an urgent response from security and DevOps teams.