CVE-2026-54168

Name of the Vulnerable Software and Affected Versions Tekton Pipelines-as-Code versions prior to 0.48.0

Description When configured with a GitHub App installed across multiple repositories, the installation token issued during webhook processing is not scoped to the triggering repository by default. This allows a user with push access to any repository within the installation to craft a PipelineRun with a remote task annotation pointing to a private repository in the same installation. Pipelines-as-Code then resolves and inlines the remote task using the unscoped token, leading to a read-only confidentiality breach that exposes the contents of the private repository's Tekton definitions.

Recommendations Update to version 0.48.0. Limit the GitHub App installation to only the repositories that require Pipelines-as-Code, avoiding organization-wide or mixed-trust installations to restrict the impact of the unscoped token.