CVE-2026-48546
HighCVSS 7.3Exploitation Probability (EPSS)
Low risk39th percentile - higher than 39% of all known CVEs
Summary
KanaDojo before version 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js vm.runInNewContext() sandbox context in the issue-auto-respond.yml workflow. Attackers can submit a pull request modifying messages.cjs to import arbitrary Node.js modules, bypassing sandbox restrictions and achieving remote code execution with full GitHub Actions runner privileges including access to AUTOMATION_PR_TOKEN.
Risk Assessment
The risk for the organization includes potential takeover of the GitHub repository and execution of unauthorized actions on behalf of automation, such as code modification, access to sensitive tokens, and possible lateral movement to other systems.
Recommendation
It is recommended to immediately upgrade KanaDojo to version 0.1.18 or later, which fixes this vulnerability. Additionally, review and restrict permissions of tokens used in GitHub Actions workflows.
Original NVD description (English source)
KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js vm.runInNewContext() sandbox context in the issue-auto-respond.yml workflow. Attackers can submit a pull request modifying messages.cjs to import arbitrary Node.js modules, bypassing sandbox restrictions and achieving remote code execution with full GitHub Actions runner privileges including access to AUTOMATION_PR_TOKEN.