{"id":"CVE-2026-116086","published":"2026-10-31T09:16:33.223","lastModified":"2026-10-31T09:16:33.223","description":"A flaw was found in konflux-ci. An attacker with permission to trigger automated workflow runs can cause an information disclosure by providing crafted issue titles to workflow scripts. The affected script incorporates user-provided titles directly into data queries without adequate sanitization, allowing the attacker to inject malicious filter commands. As a result, sensitive information such as API credentials, deployment keys, and internal notes returned from repository queries may be exposed in workflow logs.","cvssScore":8.8,"cvssSeverity":"HIGH","cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cwes":["CWE-94"],"vendors":[],"products":[],"references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-116086","tags":[]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2564224","tags":[]}],"exploitRefs":[],"hasPoc":false,"ai":{"summary":"A flaw in konflux-ci allows authenticated attackers with workflow-triggering permissions to inject malicious filter commands into workflow scripts via unsanitized issue titles, leading to exposure of sensitive data such as API credentials and deployment keys in logs.","exploitability":"Requires low-privilege access to trigger automated workflows and knowledge of how to craft malicious issue titles that manipulate query filters.","blast_radius":"Successful exploitation leaks internal secrets and configuration data accessible to the workflow, potentially compromising downstream systems and services using those credentials.","remediation":"Upgrade to konflux-ci version 2.590 or later, which includes sanitization of user-provided issue titles before use in query filters.","detection":"Monitor workflow execution logs for unexpected or verbose output containing structured data (e.g., JSON, key-value pairs) that resembles API responses or configuration values; such output may indicate successful injection of malicious filter commands.","tags":["injection","information-disclosure","ci-cd","cwe94"],"model":"garnet-coder","analyzedAt":"2026-11-01T09:57:37.484Z"}}