CVE-2026-12567 — Symlink-following arbitrary write via github_workflows module

CVE-2026-12567

Symlink-following arbitrary write via github_workflows module PUBLISHED

Description (CNA)

The github_workflows module constructs local directory paths from user-controlled repository names without validating for symlinks. A local attacker sharing the scan directory can plant a symlink at the predictable output path, causing workflow data to be written to an attacker-chosen location.

Affected (CNA)

Vendor / product	Versions
Black Lantern Security / BBOT	affected 2.0.0 through <=2.8.4

CWE

CWE-59

References

https://github.com/blacklanternsecurity/bbot/commit/16d9c42b6

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.