Vulnerability details

CVE-2026-35580

nationalsecurityagency emissary

Emissary has GitHub Actions Shell Injection via Workflow Inputs

CVSS 3.1

9.1Critical

Official description

Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection points where user-controlled workflow_dispatch inputs were interpolated directly into shell commands via ${{ }} expression syntax. An attacker with repository write access could inject arbitrary shell commands, leading to repository poisoning and supply chain compromise affecting all downstream users. This vulnerability is fixed in 8.39.0.

CVSS scores

Score	Version	Source	Vector
9.1Critical	3.1	CVEProject cvelistV5 (CNA) (GitHub_M)	`CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H`

Affected products

Vendor	Product	Versions	Source
nationalsecurityagency	emissary	< 8.39.0	CVEProject cvelistV5 (CNA)

References and advisories

https://github.com/NationalSecurityAgency/emissary/security/advisories/GHSA-3g6g-gq4r-xjm9 x_refsource_CONFIRM
https://github.com/NationalSecurityAgency/emissary/pull/1286 x_refsource_MISC
https://github.com/NationalSecurityAgency/emissary/pull/1288 x_refsource_MISC

Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published: 2026-04-07
Last updated: 2026-04-07
State: Published
Assigner (CNA): GitHub_M

Exploit prediction (EPSS)

0.57%

Probability of exploitation in 30 days

47.7%

Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable: No
Exploitation: None
Technical impact: Total

Weaknesses (CWE)

CWE-77
Improper Neutralization of Special Elements used in a Command ('Command Injection')