CVE-2026-32604 - Vulnerability Analysis
CriticalCVSS: 9.9Last Updated: April 20, 2026
Spinnaker - Command Injection
Overview
Spinnaker < 2026.1.0, 2026.0.1, 2025.4.2, 2025.3.2 contains a command injection caused by improper input handling in clouddriver pods, letting attackers execute arbitrary commands, exploit requires access to clouddriver pods.
Severity & Score
Impact
Attackers can execute arbitrary commands, exposing credentials, deleting files, or injecting resources, leading to full system compromise.
Mitigation
Update to versions 2026.1.0, 2026.0.1, 2025.4.2, or 2025.3.2 or later; as a workaround, disable gitrepo artifact types.
References
- https://github.com/spinnaker/spinnaker/releases/tag/spinnaker-release-2025.4.2
- https://github.com/spinnaker/spinnaker/releases/tag/spinnaker-release-2026.0.1
- https://github.com/spinnaker/spinnaker/security/advisories/GHSA-x3j7-7pgj-h87r
- https://github.com/spinnaker/spinnaker/releases/tag/spinnaker-release-2025.3.2
Social Media Activity(2 posts)
š“ CVE-2026-32604 - Critical (9.9) Spinnaker is an open source, multi-cloud continuous delivery platform. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2, a bad actor can execute arbitrary commands very simply on the clouddriver pods. This can expose credentials, re... š https://www.thehackerwire.com/vulnerability/CVE-2026-32604/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
View original post
š“ CVE-2026-32604 - Critical (9.9) Spinnaker is an open source, multi-cloud continuous delivery platform. In versions prior to 2026.1.0, 2026.0.1, 2025.4.2, and 2025.3.2, a bad actor can execute arbitrary commands very simply on the clouddriver pods. This can expose credentials, re... š https://www.thehackerwire.com/vulnerability/CVE-2026-32604/ #CVE #vulnerability #infosec #cybersecurity #security #Tenda #patchstack
View original postRelated Resources
Details
- CVE ID
- CVE-2026-32604
- Severity
- Critical
- CVSS Score
- 9.9
- Type
- command_injection
- Status
- new
- EPSS
- 0.0%
- Social Posts
- 2
CWE
- CWE-20
CVSS Metrics
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H