{"id":"CVE-2026-116086","kind":"vulnerability","aliases":["CVE-2026-116086"],"related":[],"title":"konflux-ci workflow script leaks credentials through crafted issue titles","description":"A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs can cause an information disclosure by providing crafted issue titles to workflow scripts. The affected script incorporates user-provided titles directly into data queries without adequate sanitization, allowing the attacker to inject malicious filter commands. As a result, sensitive information such as API credentials, deployment keys, and internal notes returned from repository queries may be exposed in workflow logs.","summary":"A workflow script in konflux-ci puts issue titles straight into data queries without sanitizing them. A user who can trigger workflow runs can inject filter commands and get API credentials, deployment keys and internal notes written into workflow logs.","severity":"high","cvss":8.8,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ci","github-actions","jq-injection","konflux-ci","other"],"not_affected_if":["no-automated-issue-workflows","no-workflow-dispatch-issue-management"],"how_to_check":"Search your konflux-ci workflows and scripts for issue titles interpolated into a jq or gh --jq program (a safe version passes them with jq --arg). Fix version unknown.","fix":null,"status":"open","published_at":"2026-10-31T09:16:33+00:00","first_seen_at":"2026-10-31T09:34:41+00:00","triaged_at":"2026-10-31T09:35:38+00:00","updated_at":"2026-10-31T09:37:08+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-31T09:35:38Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"internet","title":"konflux-ci workflow script leaks credentials through crafted issue titles","impact":"high","summary":"A workflow script in konflux-ci puts issue titles straight into data queries without sanitizing them. A user who can trigger workflow runs can inject filter commands and get API credentials, deployment keys and internal notes written into workflow logs.","audience":"developers","category":"other","nicknames":[],"who_cares":["konflux-ci","github-actions","ci"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"secrets and deployment keys exposed in workflow logs","analyst_note":"Identify the affected konflux-ci workflow script, the vulnerable versions and any patch; source is NVD only.","how_to_check":"unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-automated-issue-workflows"],"who_is_affected":"The sources describe a workflow script that builds queries from issue titles, so repositories running konflux-ci automated workflows that accept issue input are the ones to look at. The sources do not name the affected versions or the exact script. Teams that do not run these workflows can skip it.","user_interaction":"no","needs_special_setup":"yes","severity_if_unknown":"high"},"cost_usd":0.000641,"input_tokens":4152,"output_tokens":452,"severity_before":"high"},"analyst_status":"done","analyst_note":"Identify the affected konflux-ci workflow script, the vulnerable versions and any patch; source is NVD only.","search":"'-116086':14A,17A '-2026':13A,16A 'action':21B 'adequ':112C 'affect':100C 'allow':114C 'api':58B,129C 'attack':78C,116C 'autom':83C 'caus':87C 'ci':3A,18B,27B,34B,76C 'command':55B,121C 'craft':9A,93C 'credenti':7A,59B,130C 'cve':12A,15A 'data':40B,109C 'deploy':60B,131C 'direct':107C 'disclosur':90C 'expos':142C 'filter':54B,120C 'flaw':70C 'found':72C 'get':57B 'github':20B 'github-act':19B 'incorpor':102C 'inform':89C,126C 'inject':24B,53B,118C 'intern':63B,134C 'issu':10A,36B,94C 'jq':23B 'jq-inject':22B 'key':61B,132C 'konflux':2A,26B,33B,75C 'konflux-ci':1A,25B,32B,74C 'leak':6A 'log':68B,145C 'malici':119C 'may':140C 'note':64B,135C 'permiss':80C 'provid':92C,105C 'put':35B 'queri':41B,110C,139C 'repositori':138C 'result':124C 'return':136C 'run':51B,85C 'sanit':43B,113C 'script':5A,30B,98C,101C 'sensit':125C 'straight':38B 'titl':11A,37B,95C,106C 'trigger':49B,82C 'user':46B,104C 'user-provid':103C 'without':42B,111C 'workflow':4A,29B,50B,67B,84C,97C,144C 'written':65B","nicknames":[],"mitigations":[],"who_affected":"Repositories using konflux-ci's GitHub workflow for issue management, where a dispatch event accepts a user-supplied issue title and passes it into a jq query. Anyone who can trigger those runs could put jq filter syntax in the title and read secrets such as API credentials, deployment keys and internal notes from the workflow logs. Red Hat says impact is limited to information disclosure in CI logs. Teams that do not run these workflows can skip it.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"first_public_at":"2026-10-31T09:16:33+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvss_by":"secalert@redhat.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116086","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116086","severity":null,"published_at":"2026-10-31T09:16:33+00:00","modified_at":"2026-10-31T09:16:33+00:00","first_seen_at":"2026-10-31T09:34:41+00:00","fetched_at":"2026-10-31T09:34:41+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-116086:1235","url":null,"severity":null,"published_at":"2026-10-31T09:37:08+00:00","modified_at":"2026-10-31T09:37:08+00:00","first_seen_at":"2026-10-31T09:37:08+00:00","fetched_at":"2026-10-31T09:37:08+00:00","note":"Red Hat CVE page (Bugzilla 2564224, CWE-94) read: jq filter injection in konflux-ci GitHub workflow issue-management script, reached via workflow dispatch events with user-supplied issue parameters; Red Hat rates Important, no mitigation, no fixed version or script name published. Konflux repo PR/commit with fix not found in two searches; versions unknown. Settle by finding the konflux-ci/konflux-ci commit referencing Bugzilla 2564224."}],"documents":[{"id":31100,"url":"https://access.redhat.com/security/cve/CVE-2026-116086","title":"Red Hat CVE-2026-116086","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}