{"id":1431,"date":"2026-06-24T13:46:09","date_gmt":"2026-06-24T13:46:09","guid":{"rendered":"https:\/\/thedigitalfortress.us\/?p=1431"},"modified":"2026-06-24T13:46:09","modified_gmt":"2026-06-24T13:46:09","slug":"cordyceps-ci-cd-flaws-expose-300-github-repositories-to-supply-chain-attacks","status":"publish","type":"post","link":"https:\/\/thedigitalfortress.us\/?p=1431","title":{"rendered":"Cordyceps CI\/CD Flaws Expose 300+ GitHub Repositories to Supply-Chain Attacks"},"content":{"rendered":"
\n

\ue804<\/i>Ravie Lakshmanan<\/span>\ue802<\/i>Jun 24, 2026<\/span><\/span>Open Source \/ Supply Chain Security<\/span><\/p>\n<\/div>\n

\n
<\/a><\/div>\n

Cybersecurity researchers have flagged a new class of CI\/CD workflow weakness that allows attackers to hijack workflows and compromise open-source supply chains.<\/p>\n

The \u00abcritical exploitable pattern\u00bb has been codenamed Cordyceps<\/b> by Novee Security. The issue can allow full attacker control of repositories at dozens of the largest organizations worldwide, including Microsoft, Google, Apache, and Cloudflare.<\/p>\n

\u00abThe flaw is exploitable by any unauthenticated user,\u00bb Elad Meged, founding engineer and security researcher at Novee Security, said<\/a>. \u00abNo org membership or special privileges; a free account is enough to forge approvals, push code, or steal credentials.\u00bb<\/p>\n

The penetration-testing company’s scan of about 30,000 high-impact repositories has revealed more than 300 to be fully exploitable, enabling attacker-controlled code execution, credential theft, and supply chain compromise, which can have severe downstream impacts.<\/p>\n

The core of the problem trickles down to weak CI\/CD configurations that grant pull requests (PRs) more permissions than they should have. PRs are proposals<\/a> to merge code changes from one branch into the main project. However, because an untrusted PR can trigger privileged workflows, it can open the door to command injection, privilege escalation, and supply chain compromise.<\/p>\n

\n
\"Cybersecurity\"<\/a><\/div>\n<\/div>\n

\u00abThis supply chain vulnerability lies in the foundational open-source plumbing the entire industry runs on, and the kind of issue that hides from scanners because, technically, every individual piece is working as designed,\u00bb Novee explained. \u00abThe workflow does what it was told. The vulnerability exists only in the composition \u2013 untrusted data crossing a trust boundary that no one audited.\u00bb<\/p>\n

On Microsoft’s Azure Sentinel, for example, Novee found a comment on a PR that could run anonymous attacker code on Microsoft’s CI and steal a non-expiring GitHub App key. In a similar case, a PR on Google’s AI Agent Development Kit (\u00abadk-samples\u00bb) could execute attacker code on Google’s CI to gain complete authority over a Google Cloud repository.<\/p>\n

Other findings are listed below –<\/p>\n

    \n
  • Apache Doris, where two zero-click attacks cause a single comment on any PR or a forked PR to run attacker code and exfiltrate hard-coded CI credentials or a token with full write permissions<\/li>\n
  • Cloudflare Workers SDK, where a PR with a crafted branch name can execute arbitrary commands on Cloudflare’s CI runners<\/li>\n
  • Python Software Foundation’s Black, where a single pull request from anyone could execute attacker code on Black’s build systems and steal the automation token, which can then be used to approve pull requests.<\/li>\n<\/ul>\n

    Following responsible disclosure, both Microsoft and Google confirmed impact, while Cloudflare, Python, and Apache have applied hardening and patches, respectively.<\/p>\n

    \u00abThe nature of agentic coding means these CI\/CD vulnerabilities are reproduced persistently, at scale, ‘infecting’ repositories at an exponential rate,\u00bb Meged said. \u00abBecause anonymous users can use them to gain control over the software supply chain, we like to think of it as ‘puppeteering’ the repositories of some of the world’s biggest companies, silently manipulating their workflows.\u00bb<\/p>\n<\/div>\n","protected":false},"excerpt":{"rendered":"

    \ue804Ravie Lakshmanan\ue802Jun 24, 2026Open Source \/ Supply Chain Security Cybersecurity researchers have flagged a new class of CI\/CD workflow weakness that allows attackers to hijack workflows and compromise open-source supply…<\/p>\n","protected":false},"author":1,"featured_media":1432,"comment_status":"open","ping_status":"closed","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[1],"tags":[24,576,2172,918,11,71,1738,579],"class_list":["post-1431","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-uncategorized","tag-attacks","tag-cicd","tag-cordyceps","tag-expose","tag-flaws","tag-github","tag-repositories","tag-supplychain"],"_links":{"self":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/1431","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1431"}],"version-history":[{"count":0,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/posts\/1431\/revisions"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=\/wp\/v2\/media\/1432"}],"wp:attachment":[{"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1431"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1431"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/thedigitalfortress.us\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1431"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}