Vulnerabilities

TI-2026-25395 CVE-2026-32947 · GHSA-46g3-37rh-v698

Egress Policy Bypass via DNS over HTTPS (DoH) in Harden-Runner (Community Tier)

LOW 21

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners.

CVSS 4.0MEDIUM 4.6 Network High privileges No interaction EPSS 0.00317 Published 2026-03-20 Partial fix · 2.16, 2.16.0 CWE-693

TI-2026-25394 CVE-2026-32946 · GHSA-g699-3x6g-wm3g

LOW 21

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners.

CVSS 4.0MEDIUM 4.6 Network High privileges No interaction EPSS 0.00263 Published 2026-03-20 Partial fix · 2.16.0 CWE-693

TI-2026-20705 CVE-2026-25598 · GHSA-cpmj-h4f6-r6pq

LOW 28

Harden-Runner is a CI/CD security agent that works like an EDR for GitHub Actions runners.

CVSS 4.0MEDIUM 6.3 Network No auth No interaction EPSS 0.0034 Published 2026-02-09 Partial fix · 2.14.2 CWE-778