{"id":"CVE-2026-116958","aliases":["EUVD-2026-115629","GHSA-6cqg-7298-jcjp"],"status":"published","title":"Konflux-ci: unquoted variable expansion in shell command execution","description":"A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing commands with the privileges of the deployment runner.","severity":{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-12","score":0.0013,"percentile":0.02704,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-78"],"published":"2026-11-02T20:59:48Z","modified":"2026-11-03T16:15:28Z","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-116958","tags":["vdb-entry","x_refsource_REDHAT","advisory"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2564198","tags":["issue-tracking","x_refsource_REDHAT","report"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-116958","tags":["advisory"]},{"url":"https://github.com/advisories/GHSA-6cqg-7298-jcjp"},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/116xxx/CVE-2026-116958.json","tags":["advisory"]},{"url":"https://github.com/konflux-ci/konflux-ci","tags":["package"]}],"sources":{"cve":[{"id":"CVE-2026-116958","title":"Konflux-ci: unquoted variable expansion in shell command execution","description":"A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing commands with the privileges of the deployment runner.","status":"published","published":"2026-11-02T20:59:48.595Z","modified":"2026-11-03T13:25:07.586Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-03T14:28:05.368159Z"}],"euvd":[{"id":"EUVD-2026-115629","description":"A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing commands with the privileges of the deployment runner.","status":"published","published":"2026-11-02T20:59:48Z","modified":"2026-11-03T13:25:07Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"updated_at":"2026-11-03T15:18:10.516363Z"}],"ghsa":[{"id":"GHSA-6cqg-7298-jcjp","title":"A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to...","description":"A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing commands with the privileges of the deployment runner.","status":"published","published":"2026-11-02T21:32:05Z","modified":"2026-11-02T21:32:06Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-78"],"updated_at":"2026-11-03T00:02:48.181039Z"}],"nvd":[{"id":"CVE-2026-116958","description":"A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing commands with the privileges of the deployment runner.","status":"published","published":"2026-11-02T21:17:25.467Z","modified":"2026-11-03T16:15:28.703Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-03T18:16:47.713454Z"}],"osv":[{"id":"CVE-2026-116958","title":"Konflux-ci: unquoted variable expansion in shell command execution","description":"A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing commands with the privileges of the deployment runner.","status":"published","published":"2026-11-02T20:59:48.595Z","modified":"2026-11-05T02:30:50.419068256Z","cvss":[{"version":"3.1","score":6.7,"vector":"CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H","level":"medium"}],"cwes":["CWE-78"],"updated_at":"2026-11-07T03:08:01.156605Z"}]}}