{"schema":"threatline.record/2","record":{"id":"CVE-2026-33634","aliases":["GHSA-69fq-xp46-6x23","GHSA-955r-262c-33jc","GO-2026-4919"],"summary":"Aquasecurity Trivy Embedded Malicious Code Vulnerability","details":"Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD environment, including all tokens, SSH keys, cloud credentials, database passwords, and any sensitive configuration in memory.","categories":["Libraries & packages"],"product":"Trivy","vendor":"Aquasecurity","ecosystem":"Go","affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-33634","source_modified_at":"2026-03-30T14:40:28.027Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"setup-trivy","vendor":"aquasecurity","versions":[{"status":"affected","version":"< 0.2.6"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-33634","source_modified_at":"2026-03-30T14:40:28.027Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"trivy-action","vendor":"aquasecurity","versions":[{"status":"affected","version":"< 0.35.0"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-33634","source_modified_at":"2026-03-30T14:40:28.027Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"trivy","vendor":"aquasecurity","versions":[{"status":"affected","version":"= 0.69.4"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-33634","source_modified_at":"2026-03-30T14:40:28.027Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"LiteLLM","vendor":"BerriAI","versions":[{"status":"affected","version":">= 1.82.7, <= 1.82.8"}],"defaultStatus":null},{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-33634","source_modified_at":"2026-03-30T14:40:28.027Z","fetched_at":"2026-10-23T18:42:43.628194Z","product":"telnyx","vendor":"team-telnyx","versions":[{"status":"affected","version":">= 4.87.1, <= 4.87.2"}],"defaultStatus":null},{"source":"GitHub Advisory Database","source_url":"https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23","source_modified_at":"2026-03-30T16:44:30Z","fetched_at":"2026-10-23T21:47:51.402276Z","package":{"ecosystem":"go","name":"github.com/aquasecurity/trivy"},"range":"=0.69.4"},{"source":"GitHub Advisory Database","source_url":"https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23","source_modified_at":"2026-03-30T16:44:30Z","fetched_at":"2026-10-23T21:47:51.402276Z","package":{"ecosystem":"actions","name":"aquasecurity/trivy-action"},"range":"<0.35.0"},{"source":"GitHub Advisory Database","source_url":"https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23","source_modified_at":"2026-03-30T16:44:30Z","fetched_at":"2026-10-23T21:47:51.402276Z","package":{"ecosystem":"actions","name":"aquasecurity/setup-trivy"},"range":"<0.2.6"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-69fq-xp46-6x23","source_modified_at":"2026-09-10T03:50:59.825213888Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"ecosystem":"Go","name":"github.com/aquasecurity/trivy","purl":"pkg:golang/github.com/aquasecurity/trivy"},"ranges":[],"versions":["0.69.4"]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-69fq-xp46-6x23","source_modified_at":"2026-09-10T03:50:59.825213888Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"ecosystem":"GitHub Actions","name":"aquasecurity/trivy-action"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.35.0"}],"type":"ECOSYSTEM"}],"versions":[]},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-69fq-xp46-6x23","source_modified_at":"2026-09-10T03:50:59.825213888Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"ecosystem":"GitHub Actions","name":"aquasecurity/setup-trivy"},"ranges":[{"events":[{"introduced":"0"},{"fixed":"0.2.6"}],"type":"ECOSYSTEM"}],"versions":[]}],"fixed_versions":[{"source":"GitHub Advisory Database","source_url":"https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23","source_modified_at":"2026-03-30T16:44:30Z","fetched_at":"2026-10-23T21:47:51.402276Z","package":{"ecosystem":"go","name":"github.com/aquasecurity/trivy"},"version":"0.69.3"},{"source":"GitHub Advisory Database","source_url":"https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23","source_modified_at":"2026-03-30T16:44:30Z","fetched_at":"2026-10-23T21:47:51.402276Z","package":{"ecosystem":"actions","name":"aquasecurity/trivy-action"},"version":"0.35.0"},{"source":"GitHub Advisory Database","source_url":"https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23","source_modified_at":"2026-03-30T16:44:30Z","fetched_at":"2026-10-23T21:47:51.402276Z","package":{"ecosystem":"actions","name":"aquasecurity/setup-trivy"},"version":"0.2.6"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-69fq-xp46-6x23","source_modified_at":"2026-09-10T03:50:59.825213888Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"ecosystem":"GitHub Actions","name":"aquasecurity/trivy-action"},"version":"0.35.0"},{"source":"OSV","source_url":"https://osv.dev/vulnerability/GHSA-69fq-xp46-6x23","source_modified_at":"2026-09-10T03:50:59.825213888Z","fetched_at":"2026-10-23T18:48:36.087640Z","package":{"ecosystem":"GitHub Actions","name":"aquasecurity/setup-trivy"},"version":"0.2.6"}],"cvss":9.4,"severity":"Critical","kev":{"listed":true,"date_added":"2026-03-26","due_date":"2026-04-09","required_action":"Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.","ransomware_campaign_use":"Unknown"},"epss":{"probability":0.01748,"percentile":0.77668,"score_date":"2026-10-23"},"published_at":"2026-03-23T21:47:29.636Z","modified_at":"2026-09-10T03:50:59.825213888Z","provenance":[{"source":"CISA KEV","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23T17:00:09.9001Z"},{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-33634","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-03-30T14:40:28.027Z"},{"source":"GitHub Advisory Database","url":"https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23","fetched_at":"2026-10-23T21:47:51.402276Z","source_modified_at":"2026-03-30T16:44:30Z"},{"source":"OSV","url":"https://osv.dev/vulnerability/GHSA-69fq-xp46-6x23","fetched_at":"2026-10-23T18:48:36.087640Z","source_modified_at":"2026-09-10T03:50:59.825213888Z"},{"source":"EPSS","url":"https://api.first.org/data/v1/epss?cve=CVE-2026-33634","fetched_at":"2026-10-23T18:42:43.628194Z","source_modified_at":"2026-10-23"}],"sources":["CISA KEV","CVE List","GitHub Advisory Database","OSV","EPSS"],"references":[{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-33634","source":"CISA KEV"},{"source":"CVE List","url":"https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23","tags":["x_refsource_CONFIRM"]},{"source":"CVE List","url":"https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/BerriAI/litellm/issues/24518","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://docs.litellm.ai/blog/security-update-march-2026","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/aquasecurity/trivy/discussions/10425","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-2.yaml","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://inspector.pypi.io/project/litellm/1.82.7/packages/79/5f/b6998d42c6ccd32d36e12661f2734602e72a576d52a51f4245aef0b20b4d/litellm-1.82.7-py3-none-any.whl/litellm/proxy/proxy_server.py#line.130","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://inspector.pypi.io/project/litellm/1.82.8/packages/f6/2c/731b614e6cee0bca1e010a36fd381fba69ee836fe3cb6753ba23ef2b9601/litellm-1.82.8.tar.gz/litellm-1.82.8/litellm_init.pth#line.1","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://www.wiz.io/blog/teampcp-attack-kics-github-action","tags":["x_refsource_MISC"]},{"source":"CVE List","url":"https://rosesecurity.dev/2026/03/20/typosquatting-trivy.html","tags":["exploit"]},{"source":"CVE List","url":"https://www.microsoft.com/en-us/security/blog/2026/03/24/detecting-investigating-defending-against-trivy-supply-chain-compromise/","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://github.com/BerriAI/litellm/issues/24518#issuecomment-4127436387","tags":["third-party-advisory"]},{"source":"CVE List","url":"https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-33634","tags":["government-resource"]}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","cvss_source":"CVE List","ssvc":{"exploitation":"active","automatable":"no","technical_impact":"total","assessed_at":"2026-03-24T00:00:00+00:00"},"classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":"ecosystem","confidence":"heuristic","reviewed":false},"change_timestamp":"2026-09-10T03:50:59.825213888Z","content_hash":"39e34a8ab15d255b77906418e2c9b7846b45600b98df02ad7ad808c1512f2f91"}}