CVE-2026-12878: Codefresh platform vulnerability

Published Aug 25, 2026

Updated

In affected versions of the Codefresh platform an authenticated user can utilize an API endpoint to elevate to Admin permissions.

Affected Software

1 affected component

Codefresh platform

Event History

Aug 25, 2026

CVE Published

via MITRE·09:02 AM

Data Sourced

via MITRE·09:02 AM

DescriptionWeakness

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

The attacker must already be authenticated to the Codefresh platform. The issue allows that authenticated user to elevate their permissions to Admin.

Who should treat this as exposed?

Codefresh platform deployments running affected versions are exposed if authenticated users can access the vulnerable API endpoint. The provided information does not identify which versions are affected or whether any particular default configuration enables the endpoint.

CVE-2026-12878: Codefresh platform vulnerability

Affected Software

Event History

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Who should treat this as exposed?

Company

Resources

Contact

Frequently Asked Questions

What level of access does an attacker need to exploit this issue?

Who should treat this as exposed?