CVE-2026-76847

act starts an HTTP Artifacts V4 backend whenever a workflow uses actions/upload-artifact@v4 or actions/download-artifact@v4. The control-plane RPCs of that backend, including CreateArtifact, GetSignedArtifactURL, ListArtifacts, FinalizeArtifact and DeleteArtifact, accept a caller-supplied workflow_run_backend_id and never check that it belongs to the requester: validateRunIDV4 in pkg/artifacts/artifacts_v4.go parses the value and returns it with the comparison against the requesting task's run ID left commented out. The signed URLs the backend issues are authenticated by an HMAC whose key is hardcoded to the four bytes 0xba 0xdb 0xee 0xf0, identical in every build, computed over a concatenation of endpoint, expiry, artifact name and task ID with no length prefix or delimiter, so signatures are both forgeable and ambiguous between differing artifact name and task ID pairs. The --artifact-server-addr flag defaults to the host's outbound address rather than loopback, leaving the backend reachable from the surrounding network. Any client that can reach it may read, overwrite or delete the artifacts of a concurrently running job with no credentials, exposing build outputs such as secrets and deployment credentials and permitting their replacement before the owning job consumes them.

• CWE-321
• CWE-862

• https://github.com/nektos/act
• https://github.com/nektos/act/blob/v0.2.89/cmd/root.go
• https://github.com/nektos/act/blob/v0.2.89/pkg/artifacts/artifacts_v4.go
• https://www.vulncheck.com/advisories/act-through-missing-authorization-in-the-artifacts-v4-backend

Published

Aug 24, 2026

Last Modified

Aug 26, 2026

Status

Received

• Uncovering a hidden BOLA in Appsmith's snapshot logicStrix autonomously discovered a BOLA/IDOR vulnerability in Appsmith's snapshot deletion path.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-76841Xinference loads models with Hugging Face remote code execut…8.8
• CVE-2026-76842The Mercado Pago Node.js SDK interpolates caller-supplied id…8.2
• CVE-2026-76843The official Flair wheels for 0.15.0 and 0.15.1 still contai…7.8
• CVE-2026-76844webpack-dev-middleware resolves a request to a local file in…7.4
• CVE-2026-76845adm-zip 0.5.9 through 0.6.0 follows symbolic links at the ex…6.5
• CVE-2026-76846Grav before 2.0.16 contains an incomplete default denylist i…7.5
• CVE-2026-76848TypeORM's SelectQueryBuilder.distinctOn accepts an array of …7.5
• CVE-2026-7685A vulnerability was detected in Edimax BR-6208AC up to 1.02.…8.8
• CVE-2026-76850LMDeploy deserializes disaggregated-serving peer messages wi…9.8
• CVE-2026-7686A vulnerability was found in eyeo Adblock Plus up to 4.36.2 …5.5
• CVE-2026-7687A vulnerability was determined in langflow-ai langflow up to…6.3
• CVE-2026-76876Craftplan before 0.5.1 contains a broken access control vuln…5.9