Chainguard Academy (edu) integrate-platform-docs composite action interpolates inputs into shell commands
Improper Neutralization of Special Elements used in an OS Command in the integrate-platform-docs composite GitHub Action of Chainguard Academy (edu) from commit 7375a80caabcc31c33ec90f29687ed78c13d16ff before commit fb0efb2537d326ab18c07d620875b8ed2a4b39f3 allows an actor who controls the project_id or storage_bucket inputs to execute arbitrary shell commands on the GitHub Actions runner, because the inputs are interpolated directly into Bash gcloud storage cp commands in several steps via ${{ inputs.* }} expressions. The only in-repository caller passed repository secrets and ran only on trusted triggers, so no untrusted input was known to reach the vulnerable steps.
CVE-2026-105767
Primary source · Revision 1
Imported from structured advisory data. Source references identify upstream records or fields; verify affected versions and your deployed configuration.
Security context
Source reference: cve:CVE-2026-105767
Chainguard Academy (edu)
Source reference: /containers/cna/affected/0/product
- Affected versions
- Not stated in this record
- Fixed versions
- Not stated in this record
- Prerequisites
- Not stated in this record
Structured affected-version data
Original package identities and version rules from this source.
[
{
"repo": "https://github.com/chainguard-dev/edu",
"vendor": "Chainguard",
"modules": [
"integrate-platform-docs composite action"
],
"product": "Chainguard Academy (edu)",
"versions": [
{
"status": "affected",
"version": "7375a80caabcc31c33ec90f29687ed78c13d16ff",
"lessThan": "fb0efb2537d326ab18c07d620875b8ed2a4b39f3",
"versionType": "git"
}
],
"platforms": [
"GitHub Actions"
],
"programFiles": [
".github/actions/integrate-platform-docs/action.yaml",
".github/workflows/integrate-platform-docs/action.yaml",
".github/workflows/integrate-enforce-docs/action.yaml"
],
"defaultStatus": "unaffected"
}
]- Related CVEs
- CVE-2026-105767
Source reference:
/cveMetadata/cveId
Publisher severity
low
Source reference: /containers/cna/metrics
- Event
- #9312 · Revision 1
- Added to Heist Feed
- Publisher date