Records5All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9
Exploited now
step-security records in CISA KEVNo step-security vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsPriority LOW 28
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners.
CVSS 4.0MEDIUM 6.3· Network · No auth · No interaction · EPSS 0.0034 · Published 2026-02-09 · Partial fix · 2.14.2 CWE-778
Priority LOW 21
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners.
CVSS 4.0MEDIUM 4.6· Network · High privileges · No interaction · EPSS 0.00317 · Published 2026-03-20 · Partial fix · 2.16, 2.16.0 CWE-693
Priority LOW 21
Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners.
CVSS 4.0MEDIUM 4.6· Network · High privileges · No interaction · EPSS 0.00263 · Published 2026-03-20 · Partial fix · 2.16.0 CWE-693
