Is CVE-2026-116958 being exploited?

No public exploit is currently tracked.

How severe is CVE-2026-116958?

CVE-2026-116958 has a CVSS v3 severity of MEDIUM (6.7).

Back

CVE-2026-116958

Description

A flaw was found in konflux-ci. This vulnerability allows arbitrary code execution due to improper quoting of shell variables in deployment scripts. A local attacker who can supply arguments to the affected scripts could exploit this issue to trigger unintended command substitution, executing commands with the privileges of the deployment runner.