CVE-2026-116086

Name of the Vulnerable Software and Affected Versions konflux-ci (affected versions not specified)

Description An attacker with permission to trigger automated workflow runs can cause an information disclosure by providing crafted issue titles to workflow scripts. The affected script incorporates user-provided titles directly into data queries without adequate sanitization, allowing the injection of malicious filter commands. This can lead to the exposure of sensitive information, such as API credentials, deployment keys, and internal notes returned from repository queries, within the workflow logs.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.