critical9.4Known exploited
CVE-2026-33634
Aquasecurity Trivy Embedded Malicious Code Vulnerability
Exploited in the wild
This vulnerability is on the CISA Known Exploited Vulnerabilities list, added 2026-03-26. Federal due date: 2026-04-09.
Apply mitigations per vendor instructions, follow applicable BOD 22-01 guidance for cloud services, or discontinue use of the product if mitigations are unavailable.
Impact
Aquasecurity Trivy contains an embedded malicious code vulnerability that could allow an attacker to gain access to everything in the CI/CD environment, including all tokens, SSH keys, cloud credentials, database passwords, and any sensitive configuration in memory.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| go | github.com/aquasecurity/trivy | = 0.69.4 | none recorded |
| actions | aquasecurity/trivy-action | < 0.35.0 | 0.35.0 |
| actions | aquasecurity/setup-trivy | < 0.2.6 | 0.2.6 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Aquasec | Setup-Trivy | before 0.2.6 |
| Aquasec | Trivy | Version 0.69.4 |
| Aquasec | Trivy Action | before 0.35.0 |
| Litellm | Litellm | Versions 1.82.7, 1.82.8 |
| Telnyx | Telnyx | Versions 4.87.1, 4.87.2 |
Weakness classification
References
- NVD record
- CVE.org record
- GitHub advisory
- CISA KEV catalog
- https://github.com/advisories/GHSA-69fq-xp46-6x23
- https://github.com/aquasecurity/trivy/security/advisories/GHSA-69fq-xp46-6x23
- https://nvd.nist.gov/vuln/detail/CVE-2026-33634
- https://github.com/aquasecurity/trivy/discussions/10425
- https://github.com/BerriAI/litellm/issues/24518
- https://github.com/BerriAI/litellm/issues/24518#issuecomment-4127436387
- https://docs.litellm.ai/blog/security-update-march-2026
- https://futuresearch.ai/blog/litellm-pypi-supply-chain-attack
- https://github.com/pypa/advisory-database/tree/main/vulns/litellm/PYSEC-2026-2.yaml
- https://inspector.pypi.io/project/litellm/1.82.7/packages/79/5f/b6998d42c6ccd32d36e12661f2734602e72a576d52a51f4245aef0b20b4d/litellm-1.82.7-py3-none-any.whl/litellm/proxy/proxy_server.py#line.130
- https://inspector.pypi.io/project/litellm/1.82.8/packages/f6/2c/731b614e6cee0bca1e010a36fd381fba69ee836fe3cb6753ba23ef2b9601/litellm-1.82.8.tar.gz/litellm-1.82.8/litellm_init.pth#line.1
- https://rosesecurity.dev/2026/03/20/typosquatting-trivy.html
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2026-33634
- https://www.microsoft.com/en-us/security/blog/2026/03/24/detecting-investigating-defending-against-trivy-supply-chain-compromise
- https://www.wiz.io/blog/teampcp-attack-kics-github-action
- https://github.com/team-telnyx/telnyx-python/security/advisories/GHSA-955r-262c-33jc
- https://www.microsoft.com/en-us/security/blog/2026/03/24/detecting-investigating-defending-against-trivy-supply-chain-compromise/