tilt-dev/tilt Security Advisories | GitStock

critical2026-06-19

Tilt: Missing authentication on the network-exposed Tilt HUD server

GHSA-c73q-8xxr-rgqm · CVE-2026-55884

high2026-06-19

Tilt: Cross-site WebSocket hijacking of the Tilt HUD stream

GHSA-6m68-r693-78qx · CVE-2026-55883

high2026-06-19

Tilt: Unauthenticated pprof debug endpoints on the Tilt HUD server

GHSA-p749-9w62-w533 · CVE-2026-55882