{"id":"CVE-2026-116964","kind":"vulnerability","aliases":["CVE-2026-116964"],"related":[],"title":"konflux-ci: repository writers can run code in CI/CD pipelines","description":"A flaw was found in konflux-ci. An attacker with repository write access can achieve arbitrary code execution within the Continuous Integration and Continuous Delivery (CI/CD) workflow environment. By injecting shell commands into environment export scripts, the attacker causes manifest synchronization scripts to dynamically evaluate unvalidated script output. Successful exploitation allows the attacker to compromise CI/CD pipelines, steal sensitive authentication tokens and deployment credentials, and gain unauthorized access to production systems.","summary":"konflux-ci has a flaw where shell commands injected into environment export scripts are evaluated unchecked by manifest synchronization scripts. An attacker with repository write access can run arbitrary code in the CI/CD workflow and reach stored tokens and deployment credentials.","severity":"high","cvss":8.4,"epss":null,"exploited":false,"exploited_at":null,"products":[],"ecosystems":[],"tags":["ci-cd","code-injection","github-actions","konflux-ci","kubernetes","other"],"not_affected_if":["manual-pr-review","no-konflux-ci","no-repo-write-access"],"how_to_check":null,"fix":null,"status":"open","published_at":"2026-10-31T09:16:33+00:00","first_seen_at":"2026-10-31T09:34:41+00:00","triaged_at":"2026-10-31T09:35:42+00:00","updated_at":"2026-10-31T09:37:09+00:00","category":"other","confidence":0.6,"triage":{"at":"2026-10-31T09:35:42Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"network","title":"konflux-ci: repository writers can run code in CI/CD pipelines","impact":"high","summary":"konflux-ci has a flaw where shell commands injected into environment export scripts are evaluated unchecked by manifest synchronization scripts. An attacker with repository write access can run arbitrary code in the CI/CD workflow and reach stored tokens and deployment credentials.","audience":"businesses","category":"other","nicknames":[],"who_cares":["konflux-ci","ci-cd","kubernetes"],"confidence":0.5,"fix_status":"unknown","needs_auth":"yes","worst_case":"Code runs in pipeline; deployment credentials and tokens stolen","analyst_note":"Find affected konflux-ci versions and the fixed release from the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-116964) or the project's advisory.","how_to_check":"- unknown","plain_action":"","needs_analyst":true,"not_affected_if":["no-konflux-ci"],"who_is_affected":"Teams that run konflux-ci pipelines where people without full trust have repository write access can be exposed, since the malicious input sits in the repository the pipeline reads. The sources do not name affected versions or say which configurations are exposed. Teams not running konflux-ci can skip it.","user_interaction":"no","needs_special_setup":"unknown","severity_if_unknown":"unknown"},"cost_usd":0.000671,"input_tokens":4176,"output_tokens":506,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find affected konflux-ci versions and the fixed release from the NVD entry (https://nvd.nist.gov/vuln/detail/CVE-2026-116964) or the project's advisory.","search":"'-116964':14A,17A '-2026':13A,16A 'access':57B,86C,141C 'achiev':88C 'action':26B 'allow':124C 'arbitrari':60B,89C 'attack':53B,82C,111C,126C 'authent':133C 'caus':112C 'cd':20B 'ci':3A,19B,29B,33B,80C 'ci-cd':18B 'ci/cd':10A,64B,99C,129C 'code':8A,22B,61B,90C 'code-inject':21B 'command':39B,105C 'compromis':128C 'continu':94C,97C 'credenti':72B,137C 'cve':12A,15A 'deliveri':98C 'deploy':71B,136C 'dynam':117C 'environ':42B,101C,107C 'evalu':46B,118C 'execut':91C 'exploit':123C 'export':43B,108C 'flaw':36B,74C 'found':76C 'gain':139C 'github':25B 'github-act':24B 'inject':23B,40B,103C 'integr':95C 'konflux':2A,28B,32B,79C 'konflux-ci':1A,27B,31B,78C 'kubernet':30B 'manifest':49B,113C 'output':121C 'pipelin':11A,130C 'product':143C 'reach':67B 'repositori':4A,55B,84C 'run':7A,59B 'script':44B,51B,109C,115C,120C 'sensit':132C 'shell':38B,104C 'steal':131C 'store':68B 'success':122C 'synchron':50B,114C 'system':144C 'token':69B,134C 'unauthor':140C 'uncheck':47B 'unvalid':119C 'within':92C 'workflow':65B,100C 'write':56B,85C 'writer':5A","nicknames":[],"mitigations":[],"who_affected":"Teams running Konflux CI pipelines whose manifest synchronization scripts eval the output of environment export scripts. Anyone with repository write access, or a malicious pull request approved after a quick review, can run arbitrary code in the CI/CD runner and reach stored tokens and deployment credentials. Repositories where only trusted people can write or approve changes carry lower risk.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"none","audience":"developers","plain_action":null,"first_public_at":"2026-10-31T09:16:33+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H","cvss_by":"secalert@redhat.com","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-116964","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116964","severity":null,"published_at":"2026-10-31T09:16:33+00:00","modified_at":"2026-10-31T09:16:33+00:00","first_seen_at":"2026-10-31T09:34:41+00:00","fetched_at":"2026-10-31T09:34:41+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-116964:1234","url":null,"severity":null,"published_at":"2026-10-31T09:37:09+00:00","modified_at":"2026-10-31T09:37:09+00:00","first_seen_at":"2026-10-31T09:37:09+00:00","fetched_at":"2026-10-31T09:37:09+00:00","note":"Red Hat CVE page read (CWE-94, eval() in manifest scripts, CVSS 8.4). It gives no affected versions or fixed release, and the konflux-ci project has no advisory I could find. Red Hat says the only mitigation is human review of PRs. Fix stays unknown; nothing verified. To settle it, check konflux-ci GitHub commits or releases for the eval removal, or Bugzilla 2564209."}],"documents":[{"id":31099,"url":"https://access.redhat.com/security/cve/cve-2026-116964","title":"CVE-2026-116964 - Red Hat Customer Portal","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"advisory","confidence":null,"note":null}],"notice":"Free to read at a human pace. An API with keys and an MCP server are in preparation; early access: hello@infrastack.ai"}