GO-2026-5992
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker
Quick fix
GO-2026-5992 — go.woodpecker-ci.org/woodpecker/v3: upgrade to the fixed version with the command below.
go get go.woodpecker-ci.org/woodpecker/v3@v3.16.0Details
Woodpecker: Privilege escalation via unrestricted serviceAccountName in the Kubernetes backend in github.com/woodpecker-ci/woodpecker
Are you affected?
Enter the version of the package you're using.
Affected packages
1.0.0 No fixed version published yet for github.com/woodpecker-ci/woodpecker (go modules). Pin to a known-safe version or switch to an alternative.
0 No fixed version published yet for go.woodpecker-ci.org/woodpecker (go modules). Pin to a known-safe version or switch to an alternative.
0 No fixed version published yet for go.woodpecker-ci.org/woodpecker/v2 (go modules). Pin to a known-safe version or switch to an alternative.
0 Fixed in: 3.16.0 go get go.woodpecker-ci.org/woodpecker/v3@v3.16.0