---
id: "CVE-2026-114217"
kind: "vulnerability"
aliases: ["CVE-2026-114217"]
title: "konflux-ci: CI scripts leave GitHub tokens in plaintext on runners"
severity: "high"
cvss: 8.6
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["ci", "github-tokens", "infrastructure", "konflux-ci"]
not_affected_if: ["ephemeral-runners", "no-konflux-ci", "single-tenant"]
published_at: "2026-10-31T09:16:33+00:00"
first_seen_at: "2026-10-31T09:34:41+00:00"
updated_at: "2026-10-31T09:38:11+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-114217", "first_seen_at": "2026-10-31T09:34:41+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-10-31T09:38:11+00:00"}]
---

# konflux-ci: CI scripts leave GitHub tokens in plaintext on runners

Konflux CI automation scripts store GitHub access tokens in plaintext on the CI runner and do not remove them after the job finishes. A local attacker with access to that CI environment can read the tokens and act as the repository, possibly changing source code or release artifacts.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

No official check published. Inspect your Konflux release scripts and runner workspaces for GitHub tokens written to files (grep the workspace/home dirs after a job finishes); unknown which files.

## Timeline

- 2026-10-31T09:34:41+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-114217
- 2026-10-31T09:38:11+00:00 analyst — Red Hat CVE page (reporter-assigned, Important, CWE-312, Bugzilla 2564218) is the only primary source: names no versions, no scripts beyond 'Konflux CI automated release scripts', no fix, and says no mitigation available. Not exploited, no PoC found. Nothing verified; no upstream konflux-ci advisory found.

## Documents

- [advisory] Red Hat CVE-2026-114217 https://access.redhat.com/security/cve/CVE-2026-114217

## From the sources

A flaw was found in konflux-ci. Continuous Integration (CI) automation scripts store sensitive GitHub access tokens in plaintext on the runner without cleaning them up after execution. A local attacker with access to the CI environment can read these stored credentials to gain unauthorized repository access, potentially allowing them to modify source code or release artifacts.

---

_Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai_