CVE-2026-12567 — Symlink-following arbitrary write via github_workflows module
The github_workflows module constructs local directory paths from user-controlled repository names without validating for symlinks. A local attacker sharing the scan directory c…
Published: 2026-06-17 · CVSS: 2.2 · CVSS 3.1
The github_workflows module constructs local directory paths from user-controlled repository names without validating for symlinks. A local attacker sharing the scan directory can plant a symlink at the predictable output path, causing workflow data to be written to an attacker-chosen location.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7