Threats tagged 'ghsa-h98f-8r5p-hq5j'

CVE-2026-116086 is a vulnerability in konflux-ci where an attacker with permission to trigger automated workflow runs can cause information disclosure. The flaw arises because user-supplied issue titles are incorporated directly into data queries without proper sanitization, enabling injection of malicious filter commands. This can expose sensitive information such as API credentials, deployment keys, and internal notes in workflow logs. The impact is limited to information disclosure within CI pipeline logs and does not allow direct code execution or cluster compromise. No patch or mitigation meeting Red Hat's criteria is currently available.