Tilt: Unauthenticated pprof debug endpoints on the Tilt HUD server

These records connect through source-stated identifiers. Shared identifiers or dates alone do not establish shared exposure, root cause or applicability.

CVE-2026-55882 · Microsoft / collected KEV context

EUVD-2026-43111

GHSA-p749-9w62-w533

GO-2026-5533

cve-program · CVE-2026-55882

• https://github.com/tilt-dev/tilt/security/advisories/GHSA-p749-9w62-w533
• https://github.com/tilt-dev/tilt/pull/6776
• https://github.com/tilt-dev/tilt/commit/47393fba7f6ef5e305d5e814551feef8e4acbc0a
• https://github.com/tilt-dev/tilt/releases/tag/v0.37.4

euvd · EUVD-2026-43111

• https://github.com/tilt-dev/tilt/security/advisories/GHSA-p749-9w62-w533
• https://github.com/tilt-dev/tilt/pull/6776
• https://github.com/tilt-dev/tilt/commit/47393fba7f6ef5e305d5e814551feef8e4acbc0a
• https://github.com/tilt-dev/tilt/releases/tag/v0.37.4

nvd · CVE-2026-55882

• https://github.com/tilt-dev/tilt/commit/47393fba7f6ef5e305d5e814551feef8e4acbc0a
• https://github.com/tilt-dev/tilt/pull/6776
• https://github.com/tilt-dev/tilt/releases/tag/v0.37.4
• https://github.com/tilt-dev/tilt/security/advisories/GHSA-p749-9w62-w533

osv · GHSA-p749-9w62-w533

• https://github.com/tilt-dev/tilt/security/advisories/GHSA-p749-9w62-w533
• https://github.com/tilt-dev/tilt/pull/6776
• https://github.com/tilt-dev/tilt
• https://github.com/tilt-dev/tilt/releases/tag/v0.37.4

osv · GO-2026-5533

• https://github.com/tilt-dev/tilt/security/advisories/GHSA-p749-9w62-w533
• https://github.com/tilt-dev/tilt/pull/6776
• https://github.com/tilt-dev/tilt/releases/tag/v0.37.4

No related operational record is retained in the current change model.