{"id":"CVE-2026-44590","aliases":["EUVD-2026-32638","UBUNTU-CVE-2026-44590"],"status":"published","title":"Sherlock: Command Injection via pull_request_target in validate_modified_targets.yml","description":"Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validate_modified_targets.yml is vulnerable to command injection via the pull_request_target trigger. Any GitHub user can execute arbitrary commands on the CI runner and exfiltrate the GITHUB_TOKEN by opening a pull request. No approval, review, or merge is required. This vulnerability is fixed in 0.16.1.","severity":{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.01141,"percentile":0.67064,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-78"],"published":"2026-05-27T19:23:01Z","modified":"2026-10-26T11:10:00Z","exploits":[{"source":"pocgithub","id":"Astaruf/CVE-2026-44590","title":"Astaruf/CVE-2026-44590","date":"2026-05-07","url":"https://github.com/Astaruf/CVE-2026-44590"}],"affected":[{"source":"osv","ecosystem":"Ubuntu:24.04:LTS","package":"sherlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.14.3+git20231006.b336017-1","0.14.3+git20231225.2813b91-1","0.14.3+git20240119.e3a09f8-1"]},{"source":"osv","ecosystem":"Ubuntu:25.10","package":"sherlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.15.0-1"]},{"source":"osv","ecosystem":"Ubuntu:26.04:LTS","package":"sherlock","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"}]}],"versions":["0.15.0-1","0.15.0-1build1"]}],"products":[{"vendor":"sherlock-project","product":"sherlock"},{"vendor":"teledyne dalsa","product":"sherlock"}],"references":[{"url":"https://github.com/sherlock-project/sherlock/security/advisories/GHSA-v6wr-ccr4-x8g9","tags":["x_refsource_CONFIRM","exploit","report"]},{"url":"https://ubuntu.com/security/CVE-2026-44590","tags":["report"]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-44590","tags":["report"]},{"url":"https://github.com/sherlock-project/sherlock/commit/2df7c61be8b34b5e45f0a30dfcc7383cf76c8a94","tags":["report"]}],"sources":{"cve":[{"id":"CVE-2026-44590","title":"Sherlock: Command Injection via pull_request_target in validate_modified_targets.yml","description":"Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validate_modified_targets.yml is vulnerable to command injection via the pull_request_target trigger. Any GitHub user can execute arbitrary commands on the CI runner and exfiltrate the GITHUB_TOKEN by opening a pull request. No approval, review, or merge is required. This vulnerability is fixed in 0.16.1.","status":"published","published":"2026-05-27T19:23:01.638Z","modified":"2026-05-28T13:28:18.355Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N","level":"critical","assessor":"cna"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T13:43:00.288193Z"}],"euvd":[{"id":"EUVD-2026-32638","description":"Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validate_modified_targets.yml is vulnerable to command injection via the pull_request_target trigger. Any GitHub user can execute arbitrary commands on the CI runner and exfiltrate the GITHUB_TOKEN by opening a pull request. No approval, review, or merge is required. This vulnerability is fixed in 0.16.1.","status":"published","published":"2026-05-27T19:23:01Z","modified":"2026-05-28T13:28:18Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T18:21:02.581093Z"}],"nvd":[{"id":"CVE-2026-44590","description":"Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validate_modified_targets.yml is vulnerable to command injection via the pull_request_target trigger. Any GitHub user can execute arbitrary commands on the CI runner and exfiltrate the GITHUB_TOKEN by opening a pull request. No approval, review, or merge is required. This vulnerability is fixed in 0.16.1.","status":"published","published":"2026-05-27T20:16:37.293Z","modified":"2026-10-26T11:10:00.157Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N","level":"critical","assessor":"secondary"}],"cwes":["CWE-78"],"updated_at":"2026-11-02T14:12:20.885865Z"}],"osv":[{"id":"UBUNTU-CVE-2026-44590","description":"Sherlock hunts down social media accounts by username across social networks. Prior to 0.16.1, the GitHub Actions workflow validate_modified_targets.yml is vulnerable to command injection via the pull_request_target trigger. Any GitHub user can execute arbitrary commands on the CI runner and exfiltrate the GITHUB_TOKEN by opening a pull request. No approval, review, or merge is required. This vulnerability is fixed in 0.16.1.","status":"published","published":"2026-05-27T20:16:00Z","modified":"2026-06-09T08:45:09.96514275Z","cvss":[{"version":"3.1","score":9.3,"vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:H/A:N","level":"critical"}],"updated_at":"2026-11-02T16:56:22.075798Z"}]}}