3.1

CVE-2026-14967

Path traversal in github_workflows allows writing artifacts outside output directory

BBOT's `github_workflows` module could be induced to write a downloaded artifact outside its configured output directory: its path-containment check did not resolve `..`, so a crafted `CODE_REPOSITORY` URL could traverse out of the intended folder. The write is bounded to two directory levels above the output location and its target is determined by the operator's configuration, not the attacker.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Blacklanternsecurity ≫ Bbot Version >= 1.1.7 <= 2.8.6
Blacklanternsecurity ≫ Bbot Version3.0.0.0 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.647 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.649 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.652 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.654 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.659 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.669 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.671 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.673 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.691 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.765 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.767 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.773 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.782 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.786 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.793 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.795 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.798 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.819 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.821 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.829 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.836 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.849 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.851 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.858 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.870 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.876 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.884 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.897 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.903 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.907 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.909 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.981 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.986 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1056 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1062 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1064 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1068 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1070 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1079 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1137 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1139 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1141 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1153 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1173 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1184 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1190 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1254 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1271 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1274 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1304 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1313 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1317 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1333 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1343 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1345 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1349 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1386 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1388 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1390 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1401 Updaterc
Blacklanternsecurity ≫ Bbot Version3.0.0.1407 Updaterc
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.2% 0.098
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
cves@blacklanternsecurity.com 3.1 1.6 1.4
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:N/I:L/A:N
CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

The product uses external input to construct a pathname that is intended to identify a file or directory that is located underneath a restricted parent directory, but the product does not properly neutralize special elements within the pathname that can cause the pathname to resolve to a location that is outside of the restricted directory.

https://github.com/blacklanternsecurity/bbot/commit/c1c6ec05ff998e2fba55a14d1026f12563ccd82f
Patch