CVE-2026-48547 is an OS command injection vulnerability in the lingdojo kana-dojo project. An attacker with pull request access can insert shell metacharacters into the 'version' or 'changes' fields of patchNotesData.json. These fields are unsafely interpolated into a child_process.execSync() call within the release.yml GitHub Actions workflow, enabling arbitrary shell command execution. Successful exploitation requires merging a malicious pull request, which triggers the GitHub Actions runner with write permissions and access to the GITHUB_TOKEN, potentially allowing further unauthorized actions.

An attacker who can submit and have a pull request merged can execute arbitrary shell commands on the GitHub Actions runner environment. This can lead to unauthorized code execution with the permissions of the workflow, including access to the GITHUB_TOKEN, which may allow further compromise of the repository or associated resources. The vulnerability is rated high severity with a CVSS score of 8.5.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until a fix is available, restrict pull request merge permissions to trusted users only and review pull request contents carefully to prevent injection of malicious shell metacharacters. Consider disabling or restricting the affected GitHub Actions workflow if feasible.