Skip to content
Threat Feed
Subscribe

Vendor

Spinnaker

2 briefs RSS
high advisory

Remote Code Execution in Spinnaker rosco-manifests via Kustomize

The Spinnaker rosco-manifests package is vulnerable to remote code execution (RCE) via improper YAML processing during Kustomize bake operations, allowing attackers to execute arbitrary code on rosco pods.

rosco-manifests vulnerability rce ci-cd spinnaker
1t 1c
critical advisory

Critical RCE Vulnerabilities in Spinnaker

Critical vulnerabilities CVE-2026-32613 and CVE-2026-32604 in Spinnaker allow authenticated attackers to execute arbitrary code due to insufficient input validation in expression parsing and gitrepo artifact handling, potentially leading to complete system compromise.

Spinnaker rce vulnerability
2r 1t 2c