Emissary has GitHub Actions Shell Injection via Workflow Inputs

Summary Three GitHub Actions workflow files contained 10 shell injection points where user-controlled workflowdispatch inputs were interpolated directly into shell commands via $ expression syntax. An attacker with repository write access could inject arbitrary shell commands, leading to reposito...

CVE-2026-33458: Server-Side Request Forgery (SSRF)

Server-Side Request Forgery CWE-918 in Kibana One Workflow can lead to information disclosure. An authenticated user with workflow creation and execution privileges can bypass host allowlist restrictions in the Workflows Execution Engine, potentially exposing sensitive internal endpoints and data...

Multi-OS Cyberattacks: How SOCs Close a Critical Risk in 3 Steps

Your attack surface no longer lives on one operating system, and neither do the campaigns targeting it. In enterprise environments, attackers move across Windows endpoints, executive MacBooks, Linux infrastructure, and mobile devices, taking advantage of the fact that many SOC workflows are still...

PT-2026-32614

Summary External input from github.event.issue.title is used unsafely in a shell command in .github/workflows/release-candidate.yaml, allowing command injection during workflow execution. Details In .github/workflows/release-candidate.yaml, the issue title is interpolated directly into a shell...

GHSA-F23M-R3PF-42RH vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, ts-patch, vitess, gitlab-rails-ce, opensearch-dashboards, kubeflow-katib, tensorflow-gpu-jupyter, kubeflow-centraldashboard, argo-workflows, json-server, opensearch-dashboards-fips, redisinsight, pelias-api, wazuh-dashboard-fips, code-server, langfus...

CVE-2026-2950 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, ts-patch, vitess, gitlab-rails-ce, opensearch-dashboards, kubeflow-katib, tensorflow-gpu-jupyter, kubeflow-centraldashboard, argo-workflows, json-server, opensearch-dashboards-fips, redisinsight, pelias-api, wazuh-dashboard-fips, code-server, langfus...

CVE-2026-4800 vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, ts-patch, vitess, gitlab-rails-ce, opensearch-dashboards, kubeflow-katib, kubeflow-centraldashboard, argo-workflows, json-server, opensearch-dashboards-fips, redisinsight, pelias-api, wazuh-dashboard-fips, code-server, langfuse, langfuse-fips,...

GHSA-R5FR-RJXR-66JC vulnerabilities

Vulnerabilities for packages: wazuh-dashboard, ts-patch, vitess, gitlab-rails-ce, opensearch-dashboards, kubeflow-katib, kubeflow-centraldashboard, argo-workflows, json-server, opensearch-dashboards-fips, redisinsight, pelias-api, wazuh-dashboard-fips, code-server, langfuse, langfuse-fips,...

CVE-2026-5199

A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster. Exploitation requires the attacker to know or guess specific victim workflow IDs and, for signal operations, signal names. This was due to a bu...

GHSA-R5FR-RJXR-66JC vulnerabilities

Vulnerabilities for packages: argo-workflows, prism, jitsucom-jitsu, kubeflow-pipelines, ts-patch, json-server, langfuse, saf, vitess, renovate, npm, code-server, sqlpad, kubeflow-katib, kubeflow-centraldashboard, opensearch-dashboards, py3-jupyterlab, jupyter-base-notebook...

GHSA-F23M-R3PF-42RH vulnerabilities

Vulnerabilities for packages: argo-workflows, prism, jitsucom-jitsu, kubeflow-pipelines, ts-patch, json-server, langfuse, saf, vitess, renovate, npm, code-server, sqlpad, kubeflow-katib, kubeflow-centraldashboard, opensearch-dashboards, py3-jupyterlab, jupyter-base-notebook...

CVE-2026-4800 vulnerabilities

Vulnerabilities for packages: argo-workflows, prism, jitsucom-jitsu, kubeflow-pipelines, ts-patch, json-server, langfuse, saf, vitess, renovate, npm, code-server, sqlpad, kubeflow-katib, kubeflow-centraldashboard, opensearch-dashboards, py3-jupyterlab, jupyter-base-notebook...

CVE-2026-2950 vulnerabilities

Vulnerabilities for packages: argo-workflows, prism, jitsucom-jitsu, kubeflow-pipelines, ts-patch, json-server, langfuse, saf, vitess, renovate, npm, code-server, sqlpad, kubeflow-katib, kubeflow-centraldashboard, opensearch-dashboards, py3-jupyterlab, jupyter-base-notebook...

[Video] The TTP Ep 21: When Attackers Become Trusted Users

!\Video\ The TTP Ep 21: When Attackers Become Trusted Usershttps://storage.ghost.io/c/af/a0/afa04ee3-414f-4481-8d23-7e7c146f192e/content/images/2026/04/YiR2025cover2x1.jpg In this episode of the Talos Threat Perspective, we explore how identity is being used to gain, extend, and maintain access...

GHSA-XPG8-3HHP-P7W8 Temporal Server: attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster

A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster. Exploitation requires the attacker to know or guess specific victim workflow IDs and, for signal operations, signal names. This was due to a bu...

Temporal Server: attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster

A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster. Exploitation requires the attacker to know or guess specific victim workflow IDs and, for signal operations, signal names. This was due to a bu...

CVE-2026-5199

A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster. Exploitation requires the attacker to know or guess specific victim workflow IDs and, for signal operations, signal names. This was due to a bu...

CVE-2026-5199 Cross Namespace Access via Batch Operation

A writer role user in an attacker-controlled namespace could signal, delete, and reset workflows or activities in a victim namespace on the same cluster. Exploitation requires the attacker to know or guess specific victim workflow IDs and, for signal operations, signal names. This was due to a bu...

CLEANSTART-2026-MK40719 Security fixes for CVE-2025-0913, CVE-2025-4673, CVE-2025-47907, CVE-2025-58181, CVE-2025-62156, CVE-2025-62157, CVE-2026-24051, CVE-2026-25934, CVE-2026-27141, ghsa-2x5j-vhc8-9cwm, ghsa-37cx-329c-33x3, ghsa-c2hv-4pfj-mm2r, ghsa-cfpf-hrx2-8rv6, ghsa-p84v-gxvw-73pf applied in versions: 3.6.13-r0, 3.6.15-r1, 3.6.18 r0, 3.6.18-r0, 3.7.0-r0, 3.7.3-r0

Multiple security vulnerabilities affect the argo-workflows-fips package. These issues are resolved in later releases. See references for individual vulnerability details...

CLEANSTART-2026-FX27781 Security fixes for CVE-2025-0913, CVE-2025-15558, CVE-2025-4673, CVE-2025-47907, CVE-2025-47914, CVE-2025-58181, CVE-2025-62156, CVE-2025-62157, CVE-2026-24051, CVE-2026-25934, CVE-2026-26958, CVE-2026-27141, ghsa-37cx-329c-33x3, ghsa-9h8m-3fm2-qjrq, ghsa-c2hv-4pfj-mm2r, ghsa-cfpf-hrx2-8rv6, ghsa-fw7p-63qq-7hpr, ghsa-p84v-gxvw-73pf applied in versions: 3.7.0-r0, 3.7.10-r0, 3.7.10-r1, 3.7.10-r2, 3.7.3-r0, 3.7.4-r0, 3.7.6-r0, 3.7.9-r0

Multiple security vulnerabilities affect the argo-workflows-fips package. These issues are resolved in later releases. See references for individual vulnerability details...