CVE-2026-48547 is an OS command injection vulnerability in lingdojo's kana-dojo product affecting versions before 0.1.18. The issue arises because the release.yml GitHub Actions workflow interpolates unsanitized input from the version or changes fields of patchNotesData.json into a child_process.execSync() call. An attacker with pull request access can insert shell metacharacters into these fields, causing arbitrary shell command execution when the malicious pull request is merged and the workflow runs. This grants the attacker the ability to execute commands with the GitHub Actions runner's contents write permissions and access to the GITHUB_TOKEN, potentially compromising the repository and its environment.

An attacker who can submit a pull request can execute arbitrary shell commands on the GitHub Actions runner environment. This can lead to unauthorized code execution, repository compromise, and misuse of the GITHUB_TOKEN for further attacks or privilege escalation. The vulnerability affects the integrity and security of the CI/CD pipeline and the repository.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict pull request access to trusted contributors only and review pull request contents carefully to prevent injection of malicious shell metacharacters into patchNotesData.json fields used by the workflow.