CVE-2026-114217

Full vulnerability record from the local CVENow database.

Description

A flaw was found in konflux-ci. Continuous Integration (CI) automation scripts store sensitive GitHub access tokens in plaintext on the runner without cleaning them up after execution. A local attacker with access to the CI environment can read these stored credentials to gain unauthorized repository access, potentially allowing them to modify source code or release artifacts.

Severity

HIGH

CVSS score

8.6 (v3.1)

Vulnerability status

Received

Source identifier

[email protected]

Published

2026-10-31 09:16:33.077000

Last modified

2026-10-31 09:16:33.077000

View original CVE JSON

{
  "id": "CVE-2026-114217",
  "sourceIdentifier": "[email protected]",
  "published": "2026-10-31T09:16:33.077",
  "lastModified": "2026-10-31T09:16:33.077",
  "vulnStatus": "Received",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "A flaw was found in konflux-ci. Continuous Integration (CI) automation scripts store sensitive GitHub access tokens in plaintext on the runner without cleaning them up after execution. A local attacker with access to the CI environment can read these stored credentials to gain unauthorized repository access, potentially allowing them to modify source code or release artifacts."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "defaultStatus": "unaffected",
          "collectionURL": "https://github.com/konflux-ci/konflux-ci",
          "packageName": "konflux-ci",
          "versions": [
            {
              "version": "0.2.2",
              "lessThanOrEqual": "0.2.2",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "0.2.3-rc.0",
              "lessThanOrEqual": "0.2.3-rc.0",
              "versionType": "semver",
              "status": "affected"
            },
            {
              "version": "main",
              "lessThanOrEqual": "main",
              "versionType": "semver",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Primary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:H",
          "baseScore": 8.6,
          "baseSeverity": "HIGH",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "NONE",
          "userInteraction": "REQUIRED",
          "scope": "CHANGED",
          "confidentialityImpact": "HIGH",
          "integrityImpact": "HIGH",
          "availabilityImpact": "HIGH"
        },
        "exploitabilityScore": 1.8,
        "impactScore": 6.0
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Primary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-312"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://access.redhat.com/security/cve/CVE-2026-114217",
      "source": "[email protected]"
    },
    {
      "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2564218",
      "source": "[email protected]"
    }
  ]
}