Description
Emissary is a P2P based data-driven workflow engine. Prior to 8.39.0, GitHub Actions workflow files contained shell injection points where user-controlled workflow_dispatch inputs were interpolated directly into shell commands via ${{ }} expression syntax. An attacker with repository write access could inject arbitrary shell commands, leading to repository poisoning and supply chain compromise affecting all downstream users. This vulnerability is fixed in 8.39.0.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| NationalSecurityAgency | emissary | < 8.39.0 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | Botan | 3.11.1-1.1 | openSUSE-SU-2026:10540-1 |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
GitHub 1 repository
-
pvharmo2/gha-lab-ed7a1740c4 ★ 0 · Sep 5, 2026
Security-research lab: controlled reproduction of GHSA-3g6g-gq4r-xjm9 / CVE-2026-35580 (GitHub Actions workflow_dispatch input shell injection) against a pinned snapshot of NationalSecurityAgency/emi…
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | gov.nsa.emissary:emissary | < 8.39.0 | 8.39.0 | GHSA-3g6g-gq4r-xjm9 |
Advisories 1
- openSUSE-SU-2026:10540-1 Botan-3.11.1-1.1 on GA media SUSE / openSUSE Security Updates · Apr 15, 2026