CVE-2024-53351
Critical
PipeCD Vulnerable to Privilege Escalation in github.com/pipe-cd/pipecd
PipeCD Vulnerable to Privilege Escalation in github.com/pipe-cd/pipecd
Exploit probability
0.5%
Published
March 25, 2025
Required by
Not available
Last source change
March 3, 2026
02 / AFFECTED SOFTWARE
Affected packages
126 explicit affected versions
03 / CONNECTIONS
Connected vulnerabilities
04 / EVIDENCE
Source records
Open Source Vulnerabilities
CVE-2024-53351
View original source
Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges.
Open Source Vulnerabilities
GO-2025-3546
View original source
PipeCD Vulnerable to Privilege Escalation in github.com/pipe-cd/pipecd
Open Source Vulnerabilities
GHSA-4jhw-c53w-w5r7
View original source
Insecure permissions in pipecd v0.49 allow attackers to gain access to the service account's token, leading to escalation of privileges.
05 / REFERENCES
Further evidence
- https://gist.github.com/HouqiyuA/948a808b8bd48b17b37a4d5e0b6fb005
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2024/53xxx/CVE-2024-53351.json
- https://github.com/pipe-cd/pipecd
- https://nvd.nist.gov/vuln/detail/CVE-2024-53351
- https://pipecd.dev/
- https://github.com/advisories/GHSA-4jhw-c53w-w5r7
- https://pipecd.dev