{"action":"Upgrade io.spinnaker.clouddriver:clouddriver-artifacts-gitrepo to 2026.0.1 or later.","affected":[{"fixed":"2026.0.1","introduced":"0"}],"component":"io.spinnaker.clouddriver:clouddriver-artifacts-gitrepo","cve_ids":["CVE-2026-32604"],"ecosystem":"Maven","epss":0.00767,"exploited":false,"fixed_versions":["2026.0.1"],"ghsa_id":"GHSA-x3j7-7pgj-h87r","id":"tcs_01M5N9HM8MBWP170ACTCGACJ69","modified_at":"2026-09-10T03:51:03.862828310Z","published_at":"2026-04-21T14:48:38Z","references":["https://osv.dev/vulnerability/GHSA-x3j7-7pgj-h87r","https://github.com/spinnaker/spinnaker/security/advisories/GHSA-x3j7-7pgj-h87r","https://nvd.nist.gov/vuln/detail/CVE-2026-32604","https://github.com/spinnaker/spinnaker","https://github.com/spinnaker/spinnaker/releases/tag/spinnaker-release-2025.3.2","https://github.com/spinnaker/spinnaker/releases/tag/spinnaker-release-2025.4.2","https://github.com/spinnaker/spinnaker/releases/tag/spinnaker-release-2026.0.1","https://github.com/spinnaker/spinnaker/releases/tag/spinnaker-release-2026.0.2","https://zeropath.com/blog/spinnaker-rce-production-compromise"],"severity":{"label":"critical","score":9.9},"sources":[{"source":"osv","source_id":"GHSA-x3j7-7pgj-h87r","url":"https://osv.dev/vulnerability/GHSA-x3j7-7pgj-h87r"}],"summary":"Spinnaker: RCE when using gitrepo artifact types due to improper sanitization of user input on branch and paths"}