Advisory · CVE-2026-116964
Konflux CI shell injection via manifest sync scripts
An attacker with repository write access can inject shell commands into Konflux environment export scripts, which manifest synchronization scripts then evaluate, giving arbitrary code execution inside the CI/CD workflow environment.
- Vendor
- Konflux
- Product
- Konflux CI
- Identifier / CWE
- CVE-2026-116964
CWE-94 - Action timing
- Immediate
Explain it like I’m five
The build system reads a note from the repository and follows it as an instruction without checking who wrote it. A writer who slips a command into that note gets the build machine to run it.
- 01Write access held
An attacker holds repository write access to a repository used by Konflux CI.
- 02Commands injected
The attacker injects shell commands into environment export scripts.
- 03Output evaluated
Manifest synchronization scripts dynamically evaluate the unvalidated script output.
- 04Code runs in the pipeline
The injected commands execute inside the CI/CD workflow environment.
- 05Tokens and systems at risk
The attacker can compromise the pipeline, steal authentication tokens and deployment credentials, and reach production systems.
What happened
A flaw in Konflux CI lets an attacker with repository write access achieve arbitrary code execution within the CI/CD workflow environment. By injecting shell commands into environment export scripts, the attacker causes manifest synchronization scripts to dynamically evaluate unvalidated script output, allowing pipeline compromise, theft of sensitive authentication tokens and deployment credentials, and unauthorized access to production systems. NVD rates it CVSS 3.1 8.4 (CWE-94), and lists versions 0.2.2 and 0.2.3-rc.0 as affected.
Exploitation requires high privileges and user interaction on top of write access, which narrows who can pull it off, but the payoff is full pipeline execution. No fixed release is stated in the sources checked, so none is claimed here.
What to do
- Audit repository write access for repositories feeding Konflux manifest synchronization, and remove access that is not needed.
- Review environment export scripts and manifest sync output for injected or unexpected shell commands.
- Rotate authentication tokens and deployment credentials that were reachable from affected pipelines.
- Check pipeline and production access logs for unusual activity from CI identities.
- Track the vendor fix and apply it when released, then verify script output is no longer evaluated without validation.
Management note
Write access to a build input is effectively pipeline access when the pipeline evaluates that input as code. Until a fix lands, treat the writer list as the trust boundary and rotate anything the pipeline could reach.