← Back

CVE-2026-107589

nvd nist
Published: Oct 8, 2026Modified: Oct 8, 2026Deferred

JSON object

Loading...
7.5
Vector
CVSS:3.1/AV:A/AC:L/PR:L/UI:R/S:C/C:H/I:L/A:L
Exploitability: 1.7 / Impact: 5.3
Source: cve@gitlab.com (Secondary)

Description

Insufficient job validation for service accounts in Jacamar CI prior to v0.30.0 allows authenticated CI users to generate arbitrary account names.

Related CWEs

CWE-290
Authentication Bypass by Spoofing
This attack-focused weakness is caused by incorrectly implemented authentication schemes that are subject to spoofing attacks.

References (1)

Source: cve@gitlab.com

Timeline

No history available yet.