CVE-2026-35580
published 2026-04-07CVE-2026-35580: Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection points where user-controlled…
PriorityP357critical9.1CVSS 3.1
AVNACLPRHUINSCCHIHAH
EPSS
0.57%
42.7th percentile
Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection points where user-controlled workflow_dispatch inputs were interpolated directly into shell commands via ${{ }} expression syntax. An attacker with repository write access could inject arbitrary shell commands, leading to repository poisoning and supply chain compromise affecting all downstream users. This vulnerability is fixed in 8.39.0.
Affected
2 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| nationalsecurityagency | emissary | < 8.39.0 | 8.39.0 |
| nsa | emissary | 5.10.0 – 8.38.0 | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
OSV
Emissary has GitHub Actions Shell Injection via Workflow Inputs
osv·2026-04-08
CVE-2026-35580 [CRITICAL] Emissary has GitHub Actions Shell Injection via Workflow Inputs
Emissary has GitHub Actions Shell Injection via Workflow Inputs
## Summary
Three GitHub Actions workflow files contained **10 shell injection points** where
user-controlled `workflow_dispatch` inputs were interpolated directly into shell
commands via `${{ }}` expression syntax. An attacker with repository write access
could inject arbitrary shell commands, leading to repository poisoning and supply
chain compromise affecting all downstream users.
## Affected Files
| Workflow file | Injection points |
|------------------------------------------|------------------|
| `.github/workflows/maven-version.yml` | 4 |
| `.github/workflows/cherrypick.yml` | 5 |
| `.github/workflows/maven-release.yml` | 1 |
## Details
GitHub Actions `${{ }}` expressions inside `run:` blocks are substituted **bef
GHSA
Emissary has GitHub Actions Shell Injection via Workflow Inputs
ghsa·2026-04-08
CVE-2026-35580 [CRITICAL] CWE-77 Emissary has GitHub Actions Shell Injection via Workflow Inputs
Emissary has GitHub Actions Shell Injection via Workflow Inputs
## Summary
Three GitHub Actions workflow files contained **10 shell injection points** where
user-controlled `workflow_dispatch` inputs were interpolated directly into shell
commands via `${{ }}` expression syntax. An attacker with repository write access
could inject arbitrary shell commands, leading to repository poisoning and supply
chain compromise affecting all downstream users.
## Affected Files
| Workflow file | Injection points |
|------------------------------------------|------------------|
| `.github/workflows/maven-version.yml` | 4 |
| `.github/workflows/cherrypick.yml` | 5 |
| `.github/workflows/maven-release.yml` | 1 |
## Details
GitHub Actions `${{ }}` expressions inside `run:` blocks are substituted **bef
No detection rules found.
No public exploits indexed.
2026-04-07
Published