CVE-2026-32946 Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. In versions 2.15.1 and below, the Harden-Runner that allows bypass of the egress-policy: block network restriction using DNS queries over TCP. Egress policies are enforced on GitHub runners by filtering...

CVE-2026-32946

creationtimestamp| type| source ---|---|--- 2026-03-18 14:38:19+00:00| seen| https://bsky.app/profile/undercode.bsky.social/post/3mhdpnlum2t2i 2026-03-20 06:12:35+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mhhud4kx4o2e...