AUGUST 14, 2026
Live Feed
Back to database
Case File

CVE-2026-57897

MEDIUM · CVSS 6.5 EPSS 0.30% Public Exploit

Source: NVD + CISA KEV + EPSS · Published 2026-08-13 · Last synced 2026-08-14

CyberRota Analysis

AI-Generated

This vulnerability allows unauthorized access to sensitive information across repositories through organization-level actions run and job APIs. The potential impact includes exposure of private data, which could be exploited by malicious actors to gain insights into project configurations and sensitive workflows. Organizations utilizing these APIs should prioritize remediation efforts to safeguard their data integrity and confidentiality.

Public Exploit Signal

A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.

Note: these links are listed for security research and verification purposes only.

CVE
CVE-2026-57897
Severity
MEDIUM
CVSS
6.5
EPSS
0.30%

Original NVD Description

Cross-Repo Information Disclosure via Org-Level Actions Run/Job APIs