Dashboard / CVE-2026-116958

CVE-2026-116958

MEDIUM
MEDIUM Priority: 0.01 BB Relevance: 33/100
Published: 2026-11-02 Modified: 2026-11-03 First seen: 2026-11-02 Status: active

Attack Surface

Low Complexity No Interaction Conf. Impact Integ. Impact

CVSS Vector Breakdown

AV: Local
AC: Low
PR: High
UI: None
S: Unchanged
C: High
I: High
A: High

Description

A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing commands with the privileges of the deployment runner.

Weakness Classification (1)

Affected Software (4)

VendorProductVersion
— — 0.2.2
— — 0.2.3-rc.0
— — 0.2.2
— — 0.2.3-rc.0

References & Advisories (2)

Bug Bounty Relevance

33 / 100
✓ Low complexity
✓ No user interaction

CVSS Score

6.7 / 10.0 v3.1
CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

EPSS — Exploitation Probability

0.13%
Raw Score 0.001300
Percentile 2.7%
Date 2026-11-05

EPSS Trend

2026-11-05
0.00130
2026-11-04
0.00130
2026-11-03
0.00130

Intelligence Sources

mitre ref →
nvd ref →

External Links