Read the docs
TI-2024-17954 Aliases CVE-2024-27093GHSA-q6h8-4j2v-pjg4

Minder trusts client-provided mapping from repo name to upstream ID

Priority HIGH 66CWE-20Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
—
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · NVD. Fix status from CNA and GitHub.

Summary

Minder is a Software Supply Chain Security Platform. In version 0.0.31 and earlier, it is possible for an attacker to register a repository with a invalid or differing upstream ID, which causes Minder to report the repository as registered, but not remediate any future changes which conflict with policy (because the webhooks for the repo do not match any known repository in the database). When attempting to register a repo with a different repo ID, the registered provider must have admin on the named repo, or a 404 error will result. Similarly, if the stored provider token does not have repo access, then the remediations will not apply successfully. Lastly, it appears that reconciliation actions do not execute against repos with this type of mismatch. This appears to primarily be a potential denial-of-service vulnerability. This vulnerability is patched in version 0.20240226.1425+ref.53868a8.

Why it matters now

Exploitation Proof of concept CISA SSVC · not in CISA KEV
EPSS 0.00553 46th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Fixed minder (stacklok): 0.20240226.1425+ref.53868a8github.com/stacklok/minder (Go): 0.20240226.1425

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
Poc
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
stacklokminderbefore 0.20240226.1425+ref.53868a80.20240226.1425+ref.53868a8Patch availableCNA
—github.com/stacklok/minder (Go)before 0.20240226.14250.20240226.1425Patch availableGHSA-q6h8-4j2v-pjg4
  • minder Vendorstacklok Affected before 0.20240226.1425+ref.53868a8 Fixed in 0.20240226.1425+ref.53868a8 Patch available CNA
  • github.com/stacklok/minder (Go) Vendor— Affected before 0.20240226.1425 Fixed in 0.20240226.1425 Patch available GHSA-q6h8-4j2v-pjg4

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:lfprojects:minder:*:*:*:*:*:go:*:*up to 0.0.31VulnerableMLflow
  • cpe:2.3:a:lfprojects:minder:*:*:*:*:*:go:*:* Versions up to 0.0.31 Vulnerable ·MLflow

Remediation

  • Fix · CNA minder (stacklok) Fixed in 0.20240226.1425+ref.53868a8
  • Fix · GHSA-q6h8-4j2v-pjg4 github.com/stacklok/minder (Go) Fixed in 0.20240226.1425 Advisory →

Timeline

  1. 2026-10-02 Threatist record created from CVE-2024-27093
  2. 2026-10-03 Alias added: GHSA-q6h8-4j2v-pjg4

References

Exploit 1

Patch 1

Advisory 1

Other 2

  • TI-2026-41912 ToolHive: containerized MCP servers can reach host services via host.docker.internal, enabling lateral movement CVSS 3.1HIGH 8.8
  • TI-2024-22541 Minder's Github Webhook Handler vulnerable to denial of service from un-validated requests CVSS 3.1HIGH 7.5
  • TI-2026-41911 ToolHive: SSRF in remote MCP server authentication discovery (host-side, bypasses container isolation) CVSS 3.1MEDIUM 4.7
  • TI-2024-25220 Denial of service from maliciously configured Git repository in Minder CVSS 3.1MEDIUM 5.7
  • TI-2024-23307 Denial of service of Minder Server from maliciously crafted GitHub attestations CVSS 3.1MEDIUM 5.3
  • TI-2024-23266 Stacklok Minder vulnerable to denial of service from maliciously crafted templates CVSS 3.1MEDIUM 5.3
See all 9 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences