CVE-2026-127081 | OpsTree Solutions BuildPiper up to 2.6.x Pipeline Stage Linking stages project_env_id authorization

November 13, 2026 Yanac

A vulnerability marked as problematic has been reported in OpsTree Solutions BuildPiper up to 2.6.x. This impacts an unknown function of the file /api/v1/pipeline/{pipeline_id}/stages/ of the component Pipeline Stage Linking. This manipulation of the argument project_env_id causes authorization bypass.

This vulnerability is handled as CVE-2026-127081. The attack can be initiated remotely. There is not any exploit available.

It is suggested to upgrade the affected component.VulDB Recent EntriesRead More