CVE-2026-58424CWE-285CWE-732CWE-863

Permanent Fork PR Workflow Approval Gate Bypass

High · published July 3, 2026

CVSS v3.1
8.9
EPSS
0%
Percentile
29.8
In the wild
Unconfirmed
What it is

Permanent Fork PR Workflow Approval Gate Bypass

The record
Technical detail
CVSS v3.1
8.9 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00370 · 29.8th percentile
Weaknesses
CWE-285 · Improper Authorization; CWE-732 · Incorrect Permission Assignment for Critical Resource; CWE-863 · Incorrect Authorization
Published
2026-07-03T20:54Z
EPSS history
Timeline
  • 03 JUL 20:54Z
    Permanent Fork PR Workflow Approval Gate Bypass
    cvelistv5