CVE-2023-43116

Severity: high (CVSS 7.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2023-12-22 · updated 2026-06-17
Weakness: CWE-59

Description

A symbolic link following vulnerability in Buildkite Elastic CI for AWS versions prior to 6.7.1 and 5.22.5 allows the buildkite-agent user to change ownership of arbitrary directories via the PIPELINE_PATH variable in the fix-buildkite-agent-builds-permissions script.

Affected products

Buildkite Elastic Ci Stack: before 5.22.5; from 6.0.0 before 6.7.1 — fixed in 5.22.5, 6.7.1

How to fix

Upgrade to a fixed version: Buildkite Elastic Ci Stack 5.22.5, 6.7.1. Check the vendor advisory for mitigations.

References

https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0003.md
https://github.com/atredispartners/advisories/blob/master/ATREDIS-2023-0003.md

Get alerted when CVE-2023-43116 or the next vulnerability affects your stack