CVE-2026-50141Published
Woodpecker gRPC agent_id metadata can be spoofed- cross-tenant agent impersonation
Explicit identifiers and source references
These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.
CVE-2026-50141 · Microsoft / collected KEV context
cve-program · CVE-2026-50141
- https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-g7mm-9vx7-jm7h
- https://github.com/woodpecker-ci/woodpecker-security/issues/21
- https://github.com/woodpecker-ci/woodpecker/issues/6541
- https://github.com/woodpecker-ci/woodpecker/pull/6567
- https://github.com/woodpecker-ci/woodpecker/pull/6569
euvd · EUVD-2026-37897
- https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-g7mm-9vx7-jm7h
- https://github.com/woodpecker-ci/woodpecker-security/issues/21
- https://github.com/woodpecker-ci/woodpecker/issues/6541
- https://github.com/woodpecker-ci/woodpecker/pull/6567
- https://github.com/woodpecker-ci/woodpecker/pull/6569
nvd · CVE-2026-50141
- https://github.com/woodpecker-ci/woodpecker-security/issues/21
- https://github.com/woodpecker-ci/woodpecker/issues/6541
- https://github.com/woodpecker-ci/woodpecker/pull/6567
- https://github.com/woodpecker-ci/woodpecker/pull/6569
- https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-g7mm-9vx7-jm7h
osv · GHSA-g7mm-9vx7-jm7h
- https://github.com/woodpecker-ci/woodpecker/security/advisories/GHSA-g7mm-9vx7-jm7h
- https://nvd.nist.gov/vuln/detail/CVE-2026-50141
- https://github.com/woodpecker-ci/woodpecker-security/issues/21
- https://github.com/woodpecker-ci/woodpecker/issues/6541
- https://github.com/woodpecker-ci/woodpecker/pull/6567
- https://github.com/woodpecker-ci/woodpecker/pull/6569
- https://github.com/woodpecker-ci/woodpecker
osv · GO-2026-5976
Related operational evidence
Explicit CVE identifiersNo related operational record is retained in the current change model.