OTTERDOG · CVE-2026-123717 · Package
FIX → 1.8.0 ✓ verified
Eclipse Otterdog through 1.7.1 passes crafted pass or bitwarden secret references into a shell command when otterdog apply runs. A user who can edit an organization configuration can run arbitrary commands as the operator and reach their credential vault.
first public Nov 10, 2026 · 2 sources
Could this affect your app?
Free first check from your website. Connect your repo for the full answer.
Operators who run Otterdog 1.7.1 or earlier to manage GitHub organizations and use the pass or Bitwarden credential provider with the backend CLI installed and an unlocked vault. Secret references in the org configuration are resolved on otterdog apply before the confirmation prompt, so a malicious reference merged through a pull request to a shared config repository runs shell commands on the operator's machine. Teams that do not use these providers, lack bw/pass, or restrict who can change the config can skip it.
Not affected if config-editing-restricted, no-pass-or-bitwarden-provider
Who cares bitwarden, github-organizations, otterdog, pass, python
otterdog --version or pip show otterdog; 1.7.1 and earlier are affected, 1.8.0 is patchedOS command injection in the pass and bitwarden credential providers in Eclipse Foundation Eclipse Otterdog through 1.7.1 allows a user able to modify an organization configuration to execute arbitrary commands with the privileges of the operator running otterdog, including access to their credential vault, via a crafted secret reference (pass:<path> or bitwarden:<item>@<field>) or credential identifier that is resolved when otterdog apply is run.
This page as .md · .json · CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Check it with your coding agent
It reads this page and tells you if your code is affected.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
pass:...bitwarden:...@...Upgrade to 1.8.0
1.8.0 (pip install -U otterdog>=1.8.0). 1.8.0 runs the pass and bitwarden CLIs without a shell