CVE-2026-48546

HIGH

KanaDojo < 0.1.18 Sandbox Escape RCE via messages.cjs

Title source: cna

Exploitation Summary

EIP tracks 1 public exploit for CVE-2026-48546. PoCs published by ghapvharmo.

AI-analyzed exploit summary This repository contains a functional proof-of-concept for CVE-2026-48546, demonstrating a race condition in the progress-sync API endpoint that could lead to unauthorized data overwrites or stale data acceptance. The vulnerability arises from improper atomicity in the Lua script handling concurrent updates.

Description

KanaDojo before 0.1.18 contains a sandbox escape vulnerability that allows an attacker to execute arbitrary code by exploiting the explicit passing of the global require function into a Node.js vm.runInNewContext() sandbox context in the issue-auto-respond.yml workflow. Attackers can submit a pull request modifying messages.cjs to import arbitrary Node.js modules, bypassing sandbox restrictions and achieving remote code execution with full GitHub Actions runner privileges including access to AUTOMATION_PR_TOKEN.

Exploits (1)

nomisec WORKING POC

by ghapvharmo · poc

https://github.com/ghapvharmo/gha-lab-a5c1876997-1

View Code ZIP pw:eip

This repository contains a functional proof-of-concept for CVE-2026-48546, demonstrating a race condition in the progress-sync API endpoint that could lead to unauthorized data overwrites or stale data acceptance. The vulnerability arises from improper atomicity in the Lua script handling concurrent updates.

Classification

Working Poc 95%

Attack Type

Other

Complexity

Moderate

Reliability

Racy

Target: GitHub Actions Progress Sync API (Next.js-based backend)

No auth needed

Prerequisites: Access to the target API endpoint · Valid sync key (can be brute-forced or guessed) · Concurrent request capability to exploit race condition

MITRE ATT&CK

T1190 - Exploit Public-Facing Application

mistral-large-3 · analyzed Jul 24, 2026 Full analysis →