CVE-2026-50240 - Pipelines-as-code: openshift-pipelines-operator-rh: pipelines-as-code: repository users can trigger namespace edit-equivalent execution via auto-provisioned pipeline serviceaccount
CVE ID :CVE-2026-50240 Published : Nov. 6, 2026, 10:17 p.m. | 54 minutes ago Description :A flaw was found in OpenShift Pipelines-as-Code (PAC). PAC does not verify whether the creator of a Repository custom resource has permission to create PipelineRuns. A namespace user with only Repository...