Skip to content
OpenAdvisories

Vendor

step-security

5 known vulnerabilities.

Products

harden-runner 5
All Critical High Medium Low Exploited only Public exploit

4 results · Clear filters · Feed

  • Medium 4.6
    CVE-2026-32947

    Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)

    Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. In versions 2.15.1 and below, a DNS over HTTPS (DoH) vulnerability allows attackers to bypass egress-policy: block network restrictions by tunneling exfiltrated data th…

    step-security harden-runner step-security/harden-runner GitHub Actions
  • Medium 4.6
    CVE-2026-32946

    Egress Policy Bypass via DNS over TCP in Harden-Runner (Community Tier)

    Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. In versions 2.15.1 and below, the Harden-Runner that allows bypass of the egress-policy: block network restriction using DNS queries over TCP. Egress policies are enfor…

    step-security harden-runner step-security/harden-runner GitHub Actions
  • Medium 6.3
    CVE-2026-25598

    Bypassing Logging of Outbound Connections Using sendto, sendmsg, and sendmmsg in Harden-Runner (Community Tier)

    Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Prior to 2.14.2, a security vulnerability has been identified in the Harden-Runner GitHub Action (Community Tier) that allows outbound network connections to evade audi…

    step-security harden-runner step-security/harden-runner GitHub Actions
  • Medium 6.0
    CVE-2025-32955

    Harden-Runner Evasion of 'disable-sudo' policy

    Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners. Versions from 0.12.0 to before 2.12.0 are vulnerable to `disable-sudo` bypass. Harden-Runner includes a policy option `disable-sudo` to prevent the GitHub Actions runne…

    step-security harden-runner step-security/harden-runner GitHub Actions