{"schema":"vulnpedia.research/1","cve":"CVE-2026-112305","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://github.com/semaphoreui/semaphore/pull/3888","tags":["issue-tracking","technical-description","patch"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T15:28:55.694Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T15:28:55.694Z","url":"https://github.com/semaphoreui/semaphore/pull/3888"},{"source":"nvd","sourceId":"CVE-2026-112305","modified":"2026-10-19T18:17:05.250","url":"https://github.com/semaphoreui/semaphore/pull/3888"}]},{"url":"https://github.com/semaphoreui/semaphore/blob/v2.19.16/services/tasks/TaskRunner.go#L395-L431","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T15:28:55.694Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T15:28:55.694Z","url":"https://github.com/semaphoreui/semaphore/blob/v2.19.16/services/tasks/TaskRunner.go#L395-L431"},{"source":"nvd","sourceId":"CVE-2026-112305","modified":"2026-10-19T18:17:05.250","url":"https://github.com/semaphoreui/semaphore/blob/v2.19.16/services/tasks/TaskRunner.go#L395-L431"}]},{"url":"https://github.com/semaphoreui/semaphore/blob/v2.19.16/api/projects/tasks.go#L39-L75","tags":["technical-description"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T15:28:55.694Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T15:28:55.694Z","url":"https://github.com/semaphoreui/semaphore/blob/v2.19.16/api/projects/tasks.go#L39-L75"},{"source":"nvd","sourceId":"CVE-2026-112305","modified":"2026-10-19T18:17:05.250","url":"https://github.com/semaphoreui/semaphore/blob/v2.19.16/api/projects/tasks.go#L39-L75"}]},{"url":"https://github.com/semaphoreui/semaphore","tags":["product"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T15:28:55.694Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T15:28:55.694Z","url":"https://github.com/semaphoreui/semaphore"},{"source":"nvd","sourceId":"CVE-2026-112305","modified":"2026-10-19T18:17:05.250","url":"https://github.com/semaphoreui/semaphore"}]},{"url":"https://www.vulncheck.com/advisories/semaphore-ui-through-2.19.16-rce-via-task-environment-ansible-variable-override","tags":["third-party-advisory"],"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T15:28:55.694Z","origins":[{"source":"mitre","sourceId":"VulnCheck","modified":"2026-10-19T15:28:55.694Z","url":"https://www.vulncheck.com/advisories/semaphore-ui-through-2.19.16-rce-via-task-environment-ansible-variable-override"},{"source":"nvd","sourceId":"CVE-2026-112305","modified":"2026-10-19T18:17:05.250","url":"https://www.vulncheck.com/advisories/semaphore-ui-through-2.19.16-rce-via-task-environment-ansible-variable-override"}]},{"source":"euvd","sourceId":"EUVD-2026-104397","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104397","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-104397","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-104397"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[]}