CVE-2026-45803

`gh` is GitHub’s official command line tool. From 1.6.0 to before 2.92.0, a security vulnerability has been identified in GitHub CLI that could allow terminal escape sequence injection when users view GitHub Actions workflow logs using gh run view --log or gh run view --log-failed. The vulnerability stems from the way GitHub CLI handles raw Actions log output. The gh run view --log and gh run view --log-failed commands stream workflow log lines to stdout or the configured pager without sanitizing terminal control sequences. An attacker who can influence GitHub Actions log content, for example via a PR triggered workflow, can embed escape sequences that are replayed in the user's terminal when they inspect the run. Depending on the victim's terminal emulator, injected sequences could change the window title, manipulate on screen content, or in some terminal emulators (such as screen) potentially execute arbitrary commands. This vulnerability is fixed in 2.92.0.

• CWE-150

• https://github.com/cli/cli/security/advisories/GHSA-crc3-h8v6-qh57Exploit, Mitigation, Vendor Advisory
• https://github.com/cli/cli/security/advisories/GHSA-crc3-h8v6-qh57Exploit, Mitigation, Vendor Advisory

Published

May 15, 2026

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-45796Coder allows organizations to provision remote development e…6.5
• CVE-2026-45797HeyForm is an open-source form builder. Prior to version 3.0…6.4
• CVE-2026-45799Wire provides gRPC and protocol buffers for Android, Kotlin,…7.5
• CVE-2026-4580A security flaw has been discovered in code-projects Simple …9.8
• CVE-2026-45800Vvveb is a powerful and easy to use CMS with page builder to…8.7
• CVE-2026-45802FPDI is a collection of PHP classes that facilitate reading …6
• CVE-2026-45804Diffusers is the a library for pretrained diffusion models. …7.5
• CVE-2026-45805Penpot is an open-source design tool for design and code col…8.8
• CVE-2026-45806Penpot is an open-source design tool for design and code col…7.7
• CVE-2026-45807Kestra is an open-source, event-driven orchestration platfor…7.7
• CVE-2026-45808OpenBao is an open source identity-based secrets management …7.1
• CVE-2026-45809OpenSIPS is a Session Initiation Protocol (SIP) server imple…8.7