pwn.watch: Dev tools & CI incident updates

[critical] GitLab CVSS 10 unauthenticated RCE via regex compiler (CVE-2026-110264)

Thu, 22 Oct 2026 14:00:44 GMT

GitLab released a critical patch on Oct 21 2026 for CVE-2026-110264: an integer overflow in the bundled Onigmo / regex compiler that can allow an unauthenticated attacker to execute code on self-managed GitLab. CVSS 10.0; every CE/EE version from 7.0 (2014) is in range. Instances that only applied the Oct 12 regex fix remain vulnerable and must upgrade again.

Status: live · Patch: patched · Fixed in: 19.5.1, 19.4.3, 19.3.6, 19.2.9, 19.1.9, 19.0.10, 18.11.13

Latest updates:

2026-10-22: Shadowserver tracks 2,700+ internet-exposed GitLab CE instances (honeypot and patch status unknown); researcher joaxcar reported the bug via HackerOne. (source)
2026-10-21: GitLab released 19.5.1 and backports for CVE-2026-110264; GitLab.com already patched.
2026-10-12: Prior critical regex patch released (separate CVE); some operators stopped there.

CVEs: CVE-2026-110264

[critical] OpenCode: malicious MCP server can run code on Windows/WSL during sign-in (no CVE)

Thu, 22 Oct 2026 14:00:44 GMT

A command-injection flaw in the OpenCode AI coding agent let a malicious or later-hijacked remote MCP server run PowerShell commands on a developer's Windows or WSL machine when they started the MCP OAuth sign-in. The server-supplied authorization endpoint was passed unescaped to an old version of the open package. Anomaly fixed it in 1.18.33 on Sep 28 without a CVE or advisory, so scanners won't flag 1.0.137 through 1.18.32. macOS and Linux are not affected. Pillar Security found it and rates it 9.8; no in-the-wild exploitation reported.

Status: live · Patch: patched · Fixed in: OpenCode 1.18.33

Latest updates:

2026-10-22: The Hacker News reports the flaw; upgrade to 1.18.33, run `opencode mcp list`, and remove unvetted remote MCP servers. (source)
2026-10-19: Pillar Security discloses the flaw publicly. Anomaly declined to request a CVE, saying user-configured MCP servers are outside its trust boundary. (source)
2026-09-28: OpenCode 1.18.33 ships the fix as a routine browser-launch refactor; release notes don't mention security. (source)

[high] Storybook dev server: malicious websites can inject code into your project (CVE-2026-114125)

Thu, 22 Oct 2026 12:43:45 GMT

Storybook disclosed CVE-2026-114125 on Oct 21 2026: the dev server's preview iframe could be embedded by any website and accepted postMessage events from any origin. A malicious site open in the same browser could, with some user interaction, make a running `storybook dev` server change story files in your project, and a changed file could then be executed by a local runtime with your privileges. Storybook 8, 9, 10 and 11 alpha are affected (including @storybook/addon-mcp and @storybook/addon-vitest). Fixed versions shipped Oct 12; Storybook says it is not aware of exploitation. Built (static) Storybooks are not affected.

Status: closed · Patch: patched · Fixed in: 8.6.19, 9.1.21, 10.6.2, 11.0.0-alpha.6

Latest updates:

2026-10-22: Closed on pwn.watch: fixes are out for every affected major and there is no known exploitation. Upgrade Storybook (and the Visual Tests addon to 5.5.1+ if you use it) and don't run an old dev server meanwhile. (source)
2026-10-21: Advisory GHSA-f2ph-cmg5-wxc8 / CVE-2026-114125 published. Storybook says it is not aware of exploitation in the wild; upgrade before running storybook dev again. (source)
2026-10-12: Patched releases 8.6.19, 9.1.21, 10.6.2 and 11.0.0-alpha.6 ship. They block cross-host iframe embedding of the dev server, reject postMessage from unknown origins and rework the highlight event (new feature flags can re-enable the old behaviour). (source)

CVEs: CVE-2026-114125

[high] GhostAction returns: hijacked GitHub accounts push secret-stealing 'security audit' workflows to 30k+ repos

Thu, 22 Oct 2026 10:04:00 GMT

GhostAction, a campaign first documented by GitGuardian in Sept 2025, came back in 2026. It hit 772 repos in Aug-Sep 2026, then surged on Oct 8-12: about 1,900 compromised GitHub accounts pushed fake 'security audit' workflows to 30,000+ repositories (GitGuardian). The new payload exfiltrates the repo's Actions secrets plus every credential found in the full git history to 193.32.204.199 over plain HTTP. GitHub began preventing the workflow from running around Oct 9. The operator moved on to GitHub-themed phishing (my-github.com) and a VS Code tasks.json + fake .woff2 font stealer found in 94 repos.

Status: live · Patch: partial

Latest updates:

2026-10-16: OpenSourceMalware finds a second stage in 94 repos: VS Code tasks.json autoruns a stealer hidden in a fake Font Awesome .woff2 and installs a 5-minute cron. (source)
2026-10-13: GitGuardian update: Oct 8-12 wave targeted 30,000+ repos across ~3,000 users/orgs from ~1,900 compromised accounts; 3,174 secrets targeted. (source)
2026-10-11: Phishing kit on my-github.com steals password + 2FA and silently authorizes an OAuth app with repo/workflow scopes. (source)

[high] GitLab Community Edition and Enterprise Edition: GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability

Fri, 11 Sep 2026 00:00:00 GMT

GitLab Community Edition and Enterprise Edition contains a path traversal vulnerability that allows an unauthenticated user to read arbitrary files due to an improper path confinement and missing authentication enforcement in the repository commits API. Added to CISA KEV on 2026-09-11.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2026-09-11: CISA added CVE-2026-85706 to the KEV catalog (due 2026-09-14).

CVEs: CVE-2026-85706

[high] JFrog Artifactory: JFrog Artifactory Incorrect Authorization Vulnerability

Fri, 11 Sep 2026 00:00:00 GMT

JFrog Artifactory contains an incorrect authorization vulnerability that leads to a privilege escalation attack due to a validation check of the token signature/issuer and not the token’s scope. CISA added CVE-2026-42016, CVE-2026-42018 to the Known Exploited Vulnerabilities catalog on 2026-09-11 based on evidence of active exploitation.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2026-09-11: CISA added CVE-2026-42016, CVE-2026-42018 to the KEV catalog (due 2026-09-25).

CVEs: CVE-2026-42016, CVE-2026-42018

[high] JFrog Artifactory: JFrog Artifactory Improper Authentication Vulnerability

Wed, 02 Sep 2026 00:00:00 GMT

JFrog Artifactory contains an improper authentication vulnerability that under default configuration can allow an unauthenticated attacker with network access to obtain administrative privileges. Added to CISA KEV on 2026-09-02.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2026-09-02: CISA added CVE-2026-82329 to the KEV catalog (due 2026-09-05).

CVEs: CVE-2026-82329

[high] JFrog Artifactory: JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability

Thu, 27 Aug 2026 00:00:00 GMT

JFrog Artifactory contains an improper limitation of a pathname to a restricted directory vulnerability. This can allow an authenticated user to write data outside the intended Docker cache path under specific remote-repository conditions. Added to CISA KEV on 2026-08-27.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2026-08-27: CISA added CVE-2026-66384 to the KEV catalog (due 2026-09-10).

CVEs: CVE-2026-66384

[high] Gitea Gitea: Gitea Code Injection Vulnerability

Tue, 25 Aug 2026 00:00:00 GMT

Gitea contains a code injection vulnerability that allows an attacker with repository write access to send a malicious patch to the diffpatch API endpoint to plant an executable Git hook and run shell commands as the Gitea service account. Added to CISA KEV on 2026-08-25.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2026-08-25: CISA added CVE-2026-60004 to the KEV catalog (due 2026-08-28).

CVEs: CVE-2026-60004

[high] JetBrains TeamCity: JetBrains TeamCity Deserialization of Untrusted Data Vulnerability

Wed, 05 Aug 2026 00:00:00 GMT

JetBrains TeamCity contains a deserialization of untrusted data vulnerability that could allow unauthenticated remote code execution via the agent polling protocol. Added to CISA KEV on 2026-08-05.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2026-08-05: CISA added CVE-2026-63077 to the KEV catalog (due 2026-08-08).

CVEs: CVE-2026-63077

[high] Nx Nx Console: Nx Console Embedded Malicious Code Vulnerability

Wed, 27 May 2026 00:00:00 GMT

Nx Console contains an embedded malicious code vulnerability that allowed a malicious version of Nx Console to be published. The compromised extension fetched an obfuscated payload that could harvested credentials from multiple sources on disk and in memory. Added to CISA KEV on 2026-05-27.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2026-05-27: CISA added CVE-2026-48027 to the KEV catalog (due 2026-06-10).

CVEs: CVE-2026-48027

[critical] TeamPCP supply-chain campaign: Trivy → Checkmarx GitHub Actions

Tue, 31 Mar 2026 00:00:00 GMT

Threat actors tracked as TeamPCP compromised Trivy releases and GitHub Actions (including trivy-action / setup-trivy), then expanded into Checkmarx AST and KICS Actions and related artifacts. Malware stole CI/CD credentials (exfil as tpcp.tar.gz). Microsoft, Sysdig, CSA Singapore and Checkmarx published guidance in March 2026.

Status: closed · Patch: patched · Fixed in: trivy-action >= v0.35.0, setup-trivy >= v0.2.6, Checkmarx AST/KICS patched releases per Checkmarx updates

Latest updates:

2026-03: Trivy compromise disclosed; Microsoft guidance published.
2026-03: Campaign expands to Checkmarx GitHub Actions (Sysdig / Checkmarx updates).

[high] GlassWorm: self-spreading VS Code / OpenVSX extension worm hidden in invisible Unicode

Fri, 31 Oct 2025 00:00:00 GMT

Koi Security found extensions on OpenVSX (and one on Microsoft's marketplace) carrying JavaScript hidden in invisible Unicode variation selectors. The malware stole npm, GitHub, Git and OpenVSX credentials to infect more extensions, went after crypto wallets, and set up SOCKS proxies and hidden VNC.

Status: closed · Patch: patched · Fixed in: Malicious releases removed from the marketplaces

Latest updates:

2025-10-20: Wider coverage; Microsoft marketplace extension also affected (source)
2025-10-17: Koi Security discloses GlassWorm on OpenVSX (source)

[high] Red Hat Consulting GitLab breached: ~800 customer engagement reports stolen

Fri, 10 Oct 2025 00:00:00 GMT

The Crimson Collective broke into a self-managed GitLab instance used by Red Hat Consulting and claimed about 570 GB from 28,000 repos, including roughly 800 Customer Engagement Reports with infrastructure, config and credential details. Red Hat confirmed the access and said its products, supply chain and hosted services were not affected. ShinyHunters later joined the extortion.

Status: closed · Patch: no-fix-needed

Latest updates:

2025-10-10: FINRA alert to member firms (source)
2025-10-02: Red Hat confirms the incident (source)
2025-10-01: Crimson Collective claims the Red Hat GitLab theft (source)

[critical] Jenkins: Remote Code Execution Vulnerability

Thu, 02 Oct 2025 00:00:00 GMT

Jenkins contains a remote code execution vulnerability. This vulnerability that could allowed attackers to transfer a serialized Java SignedObject object to the remoting-based Jenkins CLI, that would be deserialized using a new ObjectInputStream, bypassing the existing blocklist-based protection mechanism. Added to CISA KEV on 2025-10-02.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2025-10-02: CISA added CVE-2017-1000353 to the KEV catalog (due 2025-10-23).

CVEs: CVE-2017-1000353

[high] Git: Link Following Vulnerability

Mon, 25 Aug 2025 00:00:00 GMT

Git contains a link following vulnerability that stems from Git’s inconsistent handling of carriage return characters in configuration files. Added to CISA KEV on 2025-08-25.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2025-08-25: CISA added CVE-2025-48384 to the KEV catalog (due 2025-09-15).

CVEs: CVE-2025-48384

[high] reviewdog action-setup GitHub Action: reviewdog/action-setup GitHub Action Embedded Malicious Code Vulnerability

Mon, 24 Mar 2025 00:00:00 GMT

reviewdog action-setup GitHub Action contains an embedded malicious code vulnerability that dumps exposed secrets to Github Actions Workflow Logs. Added to CISA KEV on 2025-03-24.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2025-03-24: CISA added CVE-2025-30154 to the KEV catalog (due 2025-04-14).

CVEs: CVE-2025-30154

[critical] tj-actions/changed-files compromised: CI secrets dumped in 23,000+ repos' logs

Thu, 20 Mar 2025 00:00:00 GMT

Attackers repointed the version tags of the popular tj-actions/changed-files GitHub Action to a commit that dumped runner memory, printing CI/CD secrets into workflow logs. It started with the compromise of reviewdog/action-setup and was aimed at Coinbase's agentkit repo first. Over 23,000 repositories used the action.

Status: closed · Patch: patched · Fixed in: 46.0.1 (see GitHub advisory GHSA-mw4p-6x4p-x5m5)

Latest updates:

2025-03-20: tj-actions and reviewdog maintainers finish remediation (source)
2025-03-18: CISA adds CVE-2025-30066 to KEV; reviewdog actions found compromised too
2025-03-15: GitHub removes the action, then restores a cleaned repository (source)

CVEs: CVE-2025-30066

[critical] Jenkins CLI arbitrary file read (CVE-2024-23897) leads to RCE

Mon, 19 Aug 2024 00:00:00 GMT

Jenkins Command Line Interface (CLI) contains a path traversal vulnerability that allows attackers limited read access to certain files, which can lead to code execution. Added to the CISA KEV catalog on 2024-08-19. CISA lists known use in ransomware campaigns.

Status: closed · Patch: patched · Fixed in: Jenkins 2.442, LTS 2.426.3, LTS 2.440.1

Latest updates:

2024-08-19: CISA added CVE-2024-23897 to the KEV catalog (federal deadline 2024-09-09) (source)
2024-01-24: CVE-2024-23897 published (source)
2024-01-24: Jenkins security advisory and fixed releases (source)

CVEs: CVE-2024-23897

[critical] GitLab Community and Enterprise Editions Improper Access Control

Wed, 01 May 2024 00:00:00 GMT

GitLab Community and Enterprise Editions contain an improper access control vulnerability. This allows an attacker to trigger password reset emails to be sent to an unverified email address to ultimately facilitate an account takeover. Added to the CISA KEV catalog on 2024-05-01. CVE-2023-7028 was assigned before 2024; the KEV listing came in 2024.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2024-05-01: CISA added CVE-2023-7028 to the KEV catalog (federal deadline 2024-05-22) (source)
2024-01-12: CVE-2023-7028 published (source)

CVEs: CVE-2023-7028

[critical] JetBrains TeamCity on-prem auth bypass (CVE-2024-27198) exploited

Thu, 07 Mar 2024 00:00:00 GMT

JetBrains TeamCity contains an authentication bypass vulnerability that allows an attacker to perform admin actions. Added to the CISA KEV catalog on 2024-03-07. CISA lists known use in ransomware campaigns.

Status: closed · Patch: patched · Fixed in: 2023.11.4 (JetBrains)

Latest updates:

2024-03-07: CISA added CVE-2024-27198 to the KEV catalog (federal deadline 2024-03-28) (source)
2024-03-04: CVE-2024-27198 published (source)
2024-03-04: CVE-2024-27199 published (source)

CVEs: CVE-2024-27198, CVE-2024-27199

[critical] TeamCity On-Premises auth bypass to RCE, exploited by North Korea and Russia (CVE-2023-42793)

Wed, 13 Dec 2023 00:00:00 GMT

An authentication bypass in JetBrains TeamCity On-Premises gave unauthenticated attackers remote code execution on the CI server. Microsoft saw two North Korean groups exploit it, and US and allied agencies later said Russia's SVR (APT29) mass-exploited it. That's a direct path into build pipelines.

Status: closed · Patch: patched · Fixed in: 2023.05.4

Latest updates:

2023-12-13: CISA, FBI, NSA and partners: Russia's SVR exploiting TeamCity at scale (AA23-347A) (source)
2023-10-18: Microsoft: North Korean actors Diamond Sleet and Onyx Sleet are exploiting it (source)
2023-10-04: CISA adds CVE-2023-42793 to the KEV catalog

CVEs: CVE-2023-42793

[medium] GitHub's RSA SSH host key briefly exposed in a public repo

Fri, 24 Mar 2023 00:00:00 GMT

GitHub's private RSA SSH host key for github.com was briefly exposed in a public repository. GitHub rotated it as a precaution, which meant anyone connecting over SSH with RSA saw a host key mismatch warning until they updated known_hosts.

Status: closed · Patch: patched

Latest updates:

2023-03-24: GitHub replaces its RSA SSH host key; users must update known_hosts (source)

[critical] CircleCI breach: rotate every secret

Fri, 13 Jan 2023 00:00:00 GMT

Malware on a CircleCI engineer's laptop stole a 2FA-backed SSO session. The attacker then exfiltrated customer environment variables, tokens and keys along with the encryption keys, so CircleCI told every customer to rotate all secrets stored in the platform.

Status: closed · Patch: no-fix-needed

Latest updates:

2023-01-13: Incident report: malware stole an engineer's SSO session in December 2022; customer data and encryption keys were exfiltrated (source)
2023-01-04: CircleCI tells all customers to rotate every secret stored in CircleCI (source)