VDB
BDU%3A2026-00302
BDU%3A2026-00302
PUBLISHED
CVSS 6.199999809265137 MEDIUM
Уязвимость агента безопасности CI/CD Harden-Runner, связанная с некорректным присвоением привилегий, позволяющая нарушителю повысить свои привилегии
Risk Scores
CVSS 2.0
6.199999809265137
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| StepSecurity | Harden-Runner |
Timeline
- Jan 12, 2026 CVE Published
References
- https://github.com/step-security/harden-runner/commit/0634a2670c59f64b4a01f0f96f84700a4088b9f0 url
- https://nvd.nist.gov/vuln/detail/CVE-2025-32955 url
- https://github.com/step-security/harden-runner/security/advisories/GHSA-mxr3-8whj-j74r url
- https://github.com/step-security/harden-runner/releases/tag/v2.12.0 url