Skip to content
OpenAdvisories

Vendor

step-security

5 known vulnerabilities.

step-security at a glance

Last 12 months
3
Critical · all time
0
Exploited · all time
0
Public exploit · all time
0
New vulnerabilities per month · last 12 months
0 1 2 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 1 vulnerability March 2026: 2 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 0 vulnerabilities August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202600
Jun 202600
May 202600
Apr 202600
Mar 202620
Feb 202610
Jan 202600
Dec 202500
Nov 202500
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202510
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

harden-runner 5
All Critical High Medium Low Exploited only Public exploit

5 results · Feed

  • Medium 4.6
    CVE-2026-32947

    Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)

    Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. In versions 2.15.1 and below, a DNS over HTTPS (DoH) vulnerability allows attackers to bypass egress-policy: block network restrictions by tunneling exfiltrated data th…

    step-security harden-runner step-security/harden-runner GitHub Actions
  • Medium 4.6
    CVE-2026-32946

    Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)

    Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. In versions 2.15.1 and below, the Harden-Runner that allows bypass of the egress-policy: block network restriction using DNS queries over TCP. Egress policies are enfor…

    step-security harden-runner step-security/harden-runner GitHub Actions
  • Medium 6.3
    CVE-2026-25598

    Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)

    Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Prior to 2.14.2, a security vulnerability has been identified in the Harden-Runner GitHub Action (Community Tier) that allows outbound network connections to evade audi…

    step-security harden-runner step-security/harden-runner GitHub Actions
  • Medium 6.0
    CVE-2025-32955

    Harden-Runner Evasion of 'disable-sudo' policy

    Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Versions from 0.12.0 to before 2.12.0 are vulnerable to `disable-sudo` bypass. Harden-Runner includes a policy option `disable-sudo` to prevent the GitHub Actions runne…

    step-security harden-runner step-security/harden-runner GitHub Actions
  • Low 2.7
    CVE-2024-52587

    Harden-Runner has command injection weaknesses in `setup.ts` and `arc-runner.ts`

    StepSecurity's Harden-Runner provides network egress filtering and runtime security for GitHub-hosted and self-hosted runners. Versions of step-security/harden-runner prior to v2.10.2 contain multiple command injection weaknesses via environment variables tha…

    step-security harden-runner step-security/harden-runner GitHub Actions