CVE-2026-33634
HighSummary
Trivy, skaner bezpieczeństwa, został wykorzystany przez atakującego, który użył skompromitowanych poświadczeń do opublikowania złośliwej wersji Trivy v0.69.4 oraz do zmiany tagów w `aquasecurity/trivy-action` i `aquasecurity/setup-trivy` na złośliwe. Incydent ten jest kontynuacją ataku na łańcuch dostaw, który rozpoczął się pod koniec lutego 2026 roku.
Risk Assessment
Organizacja może być narażona na kradzież danych i złośliwe oprogramowanie, co może prowadzić do poważnych naruszeń bezpieczeństwa oraz utraty zaufania użytkowników. Atakujący mógł wykorzystać ważne tokeny do wykradania nowych, obróconych sekretów podczas okna rotacji poświadczeń.
Recommendation
Zaleca się natychmiastowe zaktualizowanie Trivy do najnowszej wersji oraz przeprowadzenie pełnej analizy bezpieczeństwa w celu wykrycia potencjalnych naruszeń. Należy również wdrożyć procedury rotacji poświadczeń, które zapewnią jednoczesne unieważnienie wszystkich tokenów.
Related vulnerabilities
- CVE-2026-12944Critical
IBM Langflow OSS 1.0.0 through 1.10.0 allows attackers to execute arbitrary Python code with root privileges (UID=0) on the Langflow server by submitting components containing socket or urllib imports. This enables AWS credential theft via IMDSv1 SSRF, arbitrary file exfiltration from the container filesystem, and lateral movement to internal services (PostgreSQL, Redis) within the Docker network. The scanner incorrectly returns "validated": true, providing a false security signal.
- CVE-2026-67399Critical
Deserialization of untrusted data in WHMCS 9.0.0 before 9.0.8 and 8.0.0 before 8.13.7 allows remote attackers to execute arbitrary code.
- CVE-2026-65414Critical
An out-of-bounds write issue in Apple products was addressed with improved bounds checking. A remote attacker may be able to cause unexpected app termination or arbitrary code execution. This issue is fixed in iOS 26.7, iPadOS 26.7, iOS 27, iPadOS 27, macOS Golden Gate 27, macOS Sequoia 15.8, macOS Tahoe 26.7, tvOS 27, visionOS 27, and watchOS 27.
- CVE-2026-53713Critical
Envoy Gateway prior to 1.7.4 and 1.8.1 does not collapse redundant separators in to_absolute_normalized_path in internal/gatewayapi/luavalidator/security.lua before is_critical_path evaluates Lua submitted through EnvoyExtensionPolicy during default Strict validation. Linux resolves a double-slash absolute path as the corresponding single-slash path, but the validator does not match the redundant-separator form, allowing submitted Lua to read arbitrary files from the gateway controller pod. Exposed files can include Kubernetes service-account tokens, TLS certificates, and process environment data, and the disclosed credentials can provide access to sensitive Kubernetes API Server or Gateway xDS server information. This issue is fixed in versions 1.7.4 and 1.8.1.
- CVE-2026-55209Critical
resdata prior to 6.2.9 insufficiently validates numeric fields, grid dimensions, keyword sizes, and array indexes while parsing untrusted GRDECL files in lib/resdata/rd_kw_grdecl.cpp and lib/resdata/rd_grid.cpp. Malformed COORD, ZCORN, CORSNUM, ACTNUM, or MAPAXES data can reach rd_grid_alloc_GRDECL_kw__ with inconsistent lengths, while unbounded floating-point conversion can exceed the intended parser buffer. In a network service that accepts untrusted GRDECL files, these conditions can cause a classic buffer overflow, out-of-bounds reads, invalid array access, NULL pointer dereference, memory corruption, or service termination. This issue is fixed in version 6.2.9.
- CVE-2026-54334Critical
UEFI Firmware Parser prior to 1.14 has a flaw in ReadCLen() in uefi_firmware/compression/Tiano/Decompress.c where reading Number from GetBits(Sd, CBIT) with CBIT = 9 can obtain 511 entries for the 510-element Sd->mCLen heap array because its loop does not enforce Index < NC. The CharC == 2 run-length path can additionally request up to 531 zero writes through Sd->mCLen[Index++] = 0. Crafted Tiano or EFI compressed firmware can corrupt heap memory, deterministically crash the parsing process, and potentially execute code. This issue is fixed in version 1.14.
- CVE-2026-54333Critical
UEFI Firmware Parser prior to 1.14 has a flaw in MakeTable() in uefi_firmware/compression/Tiano/Decompress.c that does not validate that bit-length values read from a crafted Tiano or EFI compressed firmware bitstream remain within the expected range from 0 through 16. The parsing path CompressedSection.process() to efi_compressor.TianoDecompress() to TianoDecompress() to ReadPTLen() to MakeTable() can write beyond the stack-allocated Count[17] array and related decode tables. The resulting stack corruption deterministically crashes the parsing process and may permit code execution. This issue is fixed in version 1.14.
- CVE-2026-50006Critical
Anyquery prior to 0.4.5 forwards unauthenticated SQL from its MySQL-compatible server port to SQLite without restricting ATTACH DATABASE filesystem targets. A remote attacker can select any path writable by the Anyquery server process, cause SQLite to create a database file there, and place attacker-controlled table content in that file. This permits arbitrary file creation or overwrite, causing filesystem integrity loss and denial of service; remote code execution is possible only when another service interprets the written file or the process has a suitably privileged writable target. This issue is fixed in version 0.4.5.
- CVE-2026-16338Critical
IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated attacker to perform an arbitrary file write due to improper validation of file paths.
- CVE-2026-59178Critical
In ESPHome Device Builder Dashboard prior to version 1.0.12, authentication environment variables were renamed from $USERNAME/$PASSWORD to $ESPHOME_USERNAME/$ESPHOME_PASSWORD with no fallback. As a result, instances protected with the old names lost authentication after upgrade and the dashboard became open to anyone who could reach its port. The issue is fixed in 1.0.12, which restores the old names as a deprecated fallback with a startup warning.
Original NVD description (English source)
Trivy is a security scanner. On March 19, 2026, a threat actor used compromised credentials to publish a malicious Trivy v0.69.4 release, force-push 76 of 77 version tags in `aquasecurity/trivy-action` to credential-stealing malware, and replace all 7 tags in `aquasecurity/setup-trivy` with malicious commits. This incident is a continuation of the supply chain attack that began in late February 2026. Following the initial disclosure on March 1, credential rotation was performed but was not atomic (not all credentials were revoked simultaneously). The attacker could have use a valid token to exfiltrate newly rotated secrets during the rotation window (which lasted a few days). This could have allowed the attacker to retain access and execute the March 19 attack. Affected components include the `aquasecurity/trivy` Go / Container image version 0.69.4, the `aquasecurity/trivy-action` GitHub Action versions 0.0.1 – 0.34.2 (76/77), and the`aquasecurity/setup-trivy` GitHub Action versions 0.