Path traversal in github_workflows allows writing artifacts outside output directory
Priority LOW 15CWE-22Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- Required
- Attack complexity
- High
- Impact type
- —
- Confidentiality · integrity · availability
- None · Low · None
- Fix status
- No fix listed
Attack profile from CVSS 3.1 · CNA. Fix status from CNA.
Summary
BBOT's `github_workflows` module could be induced to write a downloaded artifact outside its configured output directory: its path-containment check did not resolve `..`, so a crafted `CODE_REPOSITORY` URL could traverse out of the intended folder. The write is bounded to two directory levels above the output location and its target is determined by the operator's configuration, not the attacker.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00261 17th percentileScored 2026-11-07
Fix No fix listed No fixed version in the sources yet
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Partial
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| Black Lantern Security | BBOT | 1.1.7 – 2.8.6 | — | No fix listed | CNA |
- BBOT VendorBlack Lantern Security Affected 1.1.7 – 2.8.6 Fixed in — No fix listed CNA
CPE configurations NVD · 63
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:blacklanternsecurity:bbot:*:*:*:*:*:*:*:* | 1.1.7 – 2.8.6 | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.0:rc:*:*:*:*:*:* | 3.0.0.0 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.647:rc:*:*:*:*:*:* | 3.0.0.647 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.649:rc:*:*:*:*:*:* | 3.0.0.649 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.652:rc:*:*:*:*:*:* | 3.0.0.652 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.654:rc:*:*:*:*:*:* | 3.0.0.654 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.659:rc:*:*:*:*:*:* | 3.0.0.659 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.669:rc:*:*:*:*:*:* | 3.0.0.669 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.671:rc:*:*:*:*:*:* | 3.0.0.671 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.673:rc:*:*:*:*:*:* | 3.0.0.673 rc | Vulnerable | Black Lantern Security |
- cpe:2.3:a:blacklanternsecurity:bbot:*:*:*:*:*:*:*:* Versions 1.1.7 – 2.8.6 Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.0:rc:*:*:*:*:*:* Versions 3.0.0.0 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.647:rc:*:*:*:*:*:* Versions 3.0.0.647 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.649:rc:*:*:*:*:*:* Versions 3.0.0.649 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.652:rc:*:*:*:*:*:* Versions 3.0.0.652 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.654:rc:*:*:*:*:*:* Versions 3.0.0.654 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.659:rc:*:*:*:*:*:* Versions 3.0.0.659 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.669:rc:*:*:*:*:*:* Versions 3.0.0.669 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.671:rc:*:*:*:*:*:* Versions 3.0.0.671 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.673:rc:*:*:*:*:*:* Versions 3.0.0.673 rc Vulnerable ·Black Lantern Security
Show 53 more CPE
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.691:rc:*:*:*:*:*:* | 3.0.0.691 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.765:rc:*:*:*:*:*:* | 3.0.0.765 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.767:rc:*:*:*:*:*:* | 3.0.0.767 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.773:rc:*:*:*:*:*:* | 3.0.0.773 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.782:rc:*:*:*:*:*:* | 3.0.0.782 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.786:rc:*:*:*:*:*:* | 3.0.0.786 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.793:rc:*:*:*:*:*:* | 3.0.0.793 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.795:rc:*:*:*:*:*:* | 3.0.0.795 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.798:rc:*:*:*:*:*:* | 3.0.0.798 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.819:rc:*:*:*:*:*:* | 3.0.0.819 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.821:rc:*:*:*:*:*:* | 3.0.0.821 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.829:rc:*:*:*:*:*:* | 3.0.0.829 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.836:rc:*:*:*:*:*:* | 3.0.0.836 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.849:rc:*:*:*:*:*:* | 3.0.0.849 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.851:rc:*:*:*:*:*:* | 3.0.0.851 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.858:rc:*:*:*:*:*:* | 3.0.0.858 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.870:rc:*:*:*:*:*:* | 3.0.0.870 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.876:rc:*:*:*:*:*:* | 3.0.0.876 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.884:rc:*:*:*:*:*:* | 3.0.0.884 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.897:rc:*:*:*:*:*:* | 3.0.0.897 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.903:rc:*:*:*:*:*:* | 3.0.0.903 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.907:rc:*:*:*:*:*:* | 3.0.0.907 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.909:rc:*:*:*:*:*:* | 3.0.0.909 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.981:rc:*:*:*:*:*:* | 3.0.0.981 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.986:rc:*:*:*:*:*:* | 3.0.0.986 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1056:rc:*:*:*:*:*:* | 3.0.0.1056 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1062:rc:*:*:*:*:*:* | 3.0.0.1062 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1064:rc:*:*:*:*:*:* | 3.0.0.1064 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1068:rc:*:*:*:*:*:* | 3.0.0.1068 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1070:rc:*:*:*:*:*:* | 3.0.0.1070 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1079:rc:*:*:*:*:*:* | 3.0.0.1079 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1137:rc:*:*:*:*:*:* | 3.0.0.1137 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1139:rc:*:*:*:*:*:* | 3.0.0.1139 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1141:rc:*:*:*:*:*:* | 3.0.0.1141 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1153:rc:*:*:*:*:*:* | 3.0.0.1153 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1173:rc:*:*:*:*:*:* | 3.0.0.1173 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1184:rc:*:*:*:*:*:* | 3.0.0.1184 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1190:rc:*:*:*:*:*:* | 3.0.0.1190 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1254:rc:*:*:*:*:*:* | 3.0.0.1254 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1271:rc:*:*:*:*:*:* | 3.0.0.1271 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1274:rc:*:*:*:*:*:* | 3.0.0.1274 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1304:rc:*:*:*:*:*:* | 3.0.0.1304 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1313:rc:*:*:*:*:*:* | 3.0.0.1313 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1317:rc:*:*:*:*:*:* | 3.0.0.1317 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1333:rc:*:*:*:*:*:* | 3.0.0.1333 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1343:rc:*:*:*:*:*:* | 3.0.0.1343 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1345:rc:*:*:*:*:*:* | 3.0.0.1345 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1349:rc:*:*:*:*:*:* | 3.0.0.1349 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1386:rc:*:*:*:*:*:* | 3.0.0.1386 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1388:rc:*:*:*:*:*:* | 3.0.0.1388 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1390:rc:*:*:*:*:*:* | 3.0.0.1390 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1401:rc:*:*:*:*:*:* | 3.0.0.1401 rc | Vulnerable | Black Lantern Security |
| cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1407:rc:*:*:*:*:*:* | 3.0.0.1407 rc | Vulnerable | Black Lantern Security |
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.691:rc:*:*:*:*:*:* Versions 3.0.0.691 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.765:rc:*:*:*:*:*:* Versions 3.0.0.765 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.767:rc:*:*:*:*:*:* Versions 3.0.0.767 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.773:rc:*:*:*:*:*:* Versions 3.0.0.773 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.782:rc:*:*:*:*:*:* Versions 3.0.0.782 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.786:rc:*:*:*:*:*:* Versions 3.0.0.786 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.793:rc:*:*:*:*:*:* Versions 3.0.0.793 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.795:rc:*:*:*:*:*:* Versions 3.0.0.795 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.798:rc:*:*:*:*:*:* Versions 3.0.0.798 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.819:rc:*:*:*:*:*:* Versions 3.0.0.819 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.821:rc:*:*:*:*:*:* Versions 3.0.0.821 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.829:rc:*:*:*:*:*:* Versions 3.0.0.829 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.836:rc:*:*:*:*:*:* Versions 3.0.0.836 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.849:rc:*:*:*:*:*:* Versions 3.0.0.849 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.851:rc:*:*:*:*:*:* Versions 3.0.0.851 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.858:rc:*:*:*:*:*:* Versions 3.0.0.858 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.870:rc:*:*:*:*:*:* Versions 3.0.0.870 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.876:rc:*:*:*:*:*:* Versions 3.0.0.876 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.884:rc:*:*:*:*:*:* Versions 3.0.0.884 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.897:rc:*:*:*:*:*:* Versions 3.0.0.897 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.903:rc:*:*:*:*:*:* Versions 3.0.0.903 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.907:rc:*:*:*:*:*:* Versions 3.0.0.907 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.909:rc:*:*:*:*:*:* Versions 3.0.0.909 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.981:rc:*:*:*:*:*:* Versions 3.0.0.981 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.986:rc:*:*:*:*:*:* Versions 3.0.0.986 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1056:rc:*:*:*:*:*:* Versions 3.0.0.1056 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1062:rc:*:*:*:*:*:* Versions 3.0.0.1062 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1064:rc:*:*:*:*:*:* Versions 3.0.0.1064 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1068:rc:*:*:*:*:*:* Versions 3.0.0.1068 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1070:rc:*:*:*:*:*:* Versions 3.0.0.1070 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1079:rc:*:*:*:*:*:* Versions 3.0.0.1079 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1137:rc:*:*:*:*:*:* Versions 3.0.0.1137 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1139:rc:*:*:*:*:*:* Versions 3.0.0.1139 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1141:rc:*:*:*:*:*:* Versions 3.0.0.1141 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1153:rc:*:*:*:*:*:* Versions 3.0.0.1153 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1173:rc:*:*:*:*:*:* Versions 3.0.0.1173 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1184:rc:*:*:*:*:*:* Versions 3.0.0.1184 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1190:rc:*:*:*:*:*:* Versions 3.0.0.1190 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1254:rc:*:*:*:*:*:* Versions 3.0.0.1254 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1271:rc:*:*:*:*:*:* Versions 3.0.0.1271 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1274:rc:*:*:*:*:*:* Versions 3.0.0.1274 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1304:rc:*:*:*:*:*:* Versions 3.0.0.1304 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1313:rc:*:*:*:*:*:* Versions 3.0.0.1313 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1317:rc:*:*:*:*:*:* Versions 3.0.0.1317 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1333:rc:*:*:*:*:*:* Versions 3.0.0.1333 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1343:rc:*:*:*:*:*:* Versions 3.0.0.1343 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1345:rc:*:*:*:*:*:* Versions 3.0.0.1345 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1349:rc:*:*:*:*:*:* Versions 3.0.0.1349 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1386:rc:*:*:*:*:*:* Versions 3.0.0.1386 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1388:rc:*:*:*:*:*:* Versions 3.0.0.1388 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1390:rc:*:*:*:*:*:* Versions 3.0.0.1390 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1401:rc:*:*:*:*:*:* Versions 3.0.0.1401 rc Vulnerable ·Black Lantern Security
- cpe:2.3:a:blacklanternsecurity:bbot:3.0.0.1407:rc:*:*:*:*:*:* Versions 3.0.0.1407 rc Vulnerable ·Black Lantern Security
Remediation
No fixed version listed by the sources yet.
Timeline
- 2026-10-02 Threatist record created from CVE-2026-14967
References
More Black Lantern Security Bbot vulnerabilities
- TI-2026-12601 Symlink guard bypass in unarchive module allows planting symlinks during extraction CVSS 3.1LOW 3.1
Sources
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences