CVE-2026-125125

compose-lint is a Docker Compose security linter that identifies dangerous misconfigurations before deployment. From version 0.30.0 until 0.32.0, the compose-lint GitHub Action prints the resolved directory from a failed sarif-file subdirectory creation without effective command suppression. Version 0.30.0 has no stop-commands window, while version 0.31.0 prints this error outside its stop-commands window. A pull request can place a committed symlink on that path to a directory whose name contains a newline followed by a workflow command, causing the SARIF-directory error to issue commands in the job log. Only the Action with sarif-file pointing into a subdirectory is affected; a workspace-root SARIF file, the compose-lint package, the pre-commit hook, and the Docker image do not expose this message. This issue is fixed in version 0.32.0.

• CWE-117
• CWE-150

• https://github.com/tmatens/compose-lint/commit/542e63126f795564a65c63887ea0dc558a500688
• https://github.com/tmatens/compose-lint/pull/945
• https://github.com/tmatens/compose-lint/releases/tag/v0.32.0
• https://github.com/tmatens/compose-lint/security/advisories/GHSA-xcf7-88g6-7xr8

Published

Nov 10, 2026

Last Modified

Nov 10, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-125117Mongoose is a MongoDB object modeling tool designed to work …8.2
• CVE-2026-12512The Quotes llama WordPress plugin before 3.1.6 does not prop…8.6
• CVE-2026-125121compose-lint is a Docker Compose security linter that identi…5.3
• CVE-2026-125122compose-lint is a Docker Compose security linter that identi…2.3
• CVE-2026-125123compose-lint is a Docker Compose security linter that identi…2.3
• CVE-2026-125124compose-lint is a Docker Compose security linter that identi…2.3
• CVE-2026-12513The Shared Files WordPress plugin before 1.7.67, shared-fil…6.8
• CVE-2026-125134Use after free in Windows Function Discovery Resource Public…7.5
• CVE-2026-125135Out-of-bounds read in HID Parser Library allows an unauthori…6.8
• CVE-2026-125136Heap-based buffer overflow in Windows Network Connected Devi…8.8
• CVE-2026-125137Heap-based buffer overflow in Windows Graphics Kernel allows…7.8
• CVE-2026-12514The Shared Files WordPress plugin before 1.7.67, shared-fil…5.3