CyberSecBulletin

Padok-team vulnerabilities

We track 1 vulnerability in Padok-team products. 1 is rated high or critical, and none are known to be exploited. The most recent was published on October 26, 2026.

1vulnerabilities
1critical
0high
0exploited
9.9average CVSS score

Latest Padok-team vulnerabilities

  • 9.9 Critical severity

    burrito: Missing Authentication for Critical Functionality

    CVE-2026-102649Padok-team

    Burrito is a Terraform Automation Collaboration Software (TACoS) Kubernetes operator. Prior to 0.13.0, `POST /api/webhook` accepts unsigned GitHub and GitLab events when a `TerraformRepository`'s credentials omit `webhookSecret` or set it to an empty value, in