CVE-2026-44220

{
  "id": "CVE-2026-44220",
  "sourceIdentifier": "[email protected]",
  "published": "2026-05-12T20:16:42.893",
  "lastModified": "2026-10-26T18:10:00.173",
  "vulnStatus": "Deferred",
  "cveTags": [],
  "descriptions": [
    {
      "lang": "en",
      "value": "ciguard is a static security auditor for CI/CD pipelines. From 0.8.0 to 0.8.1 , the discover_pipeline_files() function in src/ciguard/discovery.py walks a directory tree following symlinks, with cycle protection via tracking visited resolved paths. An attacker who can plant a symlink in a directory the user (or AI agent) scans can cause discovery to walk into the symlink target and return paths to pipeline-shaped files outside the requested root. This vulnerability is fixed in 0.8.2."
    },
    {
      "lang": "es",
      "value": "ciguard es un auditor de seguridad estático para pipelines de CI/CD. De 0.8.0 a 0.8.1, la función discover_pipeline_files() en src/ciguard/discovery.py recorre un árbol de directorios siguiendo enlaces simbólicos, con protección contra ciclos mediante el seguimiento de rutas resueltas visitadas. Un atacante que puede plantar un enlace simbólico en un directorio que el usuario (o agente de IA) escanea puede hacer que el descubrimiento entre en el destino del enlace simbólico y devuelva rutas a archivos con formato de pipeline fuera de la raíz solicitada. Esta vulnerabilidad está corregida en 0.8.2."
    }
  ],
  "affected": [
    {
      "source": "[email protected]",
      "affectedData": [
        {
          "vendor": "Jo-Jo98",
          "product": "ciguard",
          "versions": [
            {
              "version": ">= 0.8.0, < 0.8.2",
              "status": "affected"
            }
          ]
        }
      ]
    }
  ],
  "metrics": {
    "cvssMetricV31": [
      {
        "source": "[email protected]",
        "type": "Secondary",
        "cvssData": {
          "version": "3.1",
          "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:L/I:N/A:N",
          "baseScore": 3.2,
          "baseSeverity": "LOW",
          "attackVector": "LOCAL",
          "attackComplexity": "LOW",
          "privilegesRequired": "LOW",
          "userInteraction": "REQUIRED",
          "scope": "CHANGED",
          "confidentialityImpact": "LOW",
          "integrityImpact": "NONE",
          "availabilityImpact": "NONE"
        },
        "exploitabilityScore": 1.5,
        "impactScore": 1.4
      }
    ],
    "ssvcV203": [
      {
        "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
        "ssvcData": {
          "timestamp": "2026-05-13T14:58:20.667032Z",
          "id": "CVE-2026-44220",
          "options": [
            {
              "exploitation": "poc"
            },
            {
              "automatable": "no"
            },
            {
              "technicalImpact": "partial"
            }
          ],
          "role": "CISA Coordinator",
          "version": "2.0.3"
        }
      }
    ]
  },
  "weaknesses": [
    {
      "source": "[email protected]",
      "type": "Secondary",
      "description": [
        {
          "lang": "en",
          "value": "CWE-59"
        }
      ]
    }
  ],
  "references": [
    {
      "url": "https://github.com/Jo-Jo98/ciguard/security/advisories/GHSA-8cxw-cc62-q28v",
      "source": "[email protected]"
    },
    {
      "url": "https://github.com/Jo-Jo98/ciguard/security/advisories/GHSA-8cxw-cc62-q28v",
      "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0"
    }
  ]
}