CVE-2026-57897

MediumCVSS 6.5

Published: 13/08/2026(UTC)Updated: 13/08/2026(UTC)Translated: 13/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.30%

22th percentile - higher than 22% of all known CVEs

Summary

The vulnerability enables cross-repository information disclosure via Org-Level Actions Run/Job APIs. An attacker can obtain data from other repositories.

Risk Assessment

Risk of leaking confidential data across repositories, potentially compromising project integrity and data confidentiality.

Recommendation

Update the software to a patched version and restrict access to Org-Level Actions APIs.

Original NVD description (English source)

Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs