CVE-2026-12567

{
  "id": "CVE-2026-12567",
  "sourceIdentifier": "[email protected]",
  "published": "2026-06-17T23:17:03.220",
  "lastModified": "2026-10-26T11:10:00.157",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "The github_workflows module constructs local directory paths from user-controlled repository names without validating for symlinks. A local attacker sharing the scan directory can plant a symlink at the predictable output path, causing workflow data to be written to an attacker-chosen location."
    },
    {
      "lang": "es",
      "value": "El módulo github_workflows construye rutas de directorio locales a partir de nombres de repositorio controlados por el usuario sin validar en busca de enlaces simbólicos. Un atacante local que comparte el directorio de escaneo puede plantar un enlace simbólico en la ruta de salida predecible, lo que provoca que los datos del flujo de trabajo se escriban en una ubicación elegida por el atacante."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Black Lantern Security",
          "product": "BBOT",
          "defaultStatus": "unaffected",
          "repo": "https://github.com/blacklanternsecurity/bbot",
          "versions": [
            {
              "version": "2.0.0",
              "lessThanOrEqual": "<=2.8.4",
              "versionType": "custom",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N",
          "baseScore": 2.2,
          "baseSeverity": "LOW",
          "attackVector": "LOCAL",
          "attackComplexity": "HIGH",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "UNCHANGED",
          "confidentialityImpact": "NONE",
          "integrityImpact": "LOW",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 0.8,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-06-18T12:50:06.432373Z",
          "id": "CVE-2026-12567",
          "options": [
            {
              "exploitation": "none"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-59"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/blacklanternsecurity/bbot/commit/16d9c42b6",
      "source": "[email protected]"
    }
  ]
}