Vulnerabilities CVE-2026-55175

CVE-2026-55175

High

Open

TLP:CLEAR

Spinnaker: Improper yaml processing on kustomize bake operations

NVD CVE.org

Ransomware

AI Analysis

No AI analysis yet.

Description

Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to versions 2026.1.1, 2026.0.3, 2025.4.4, and 2025.3.4 on their respective release lines, Kustomize bake operations allow unsafe YAML tag processing in rosco manifests. This can lead to remote code execution on rosco pods when performing Kustomize bakes. This issue is fixed in versions 2026.1.1, 2026.0.3, 2025.4.4, and 2025.3.4.

Details

CVSS Score: 7.5
EPSS Score ⓘ: 0.62%

46.6th percentile
CVSS Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Confidence: 90%
Published: Jul 10, 2026
Last Modified: Jul 15, 2026

Notes

No notes yet. Click "Add Note" to create the first analysis note.

Opinions

No opinions yet. Be the first to assess this intelligence.