CVE-2026-114217

Name of the Vulnerable Software and Affected Versions konflux-ci (affected versions not specified)

Description Continuous Integration (CI) automation scripts store sensitive GitHub access tokens in plaintext on the runner and fail to remove them after execution. A local attacker with access to the CI environment can retrieve these credentials to obtain unauthorized access to the repository, which could lead to the modification of source code or release artifacts.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.