Search
Find a vulnerability
Search criteria
ⓘ
Use this form to refine search results.
Full-text search supports keyword queries with ranking and filtering.
You can combine vendor, product, and sources to narrow results.
Enable “Apply ordering” to sort by date instead of relevance.
10 vulnerabilities by zuke-build
CVE-2026-119291 (GCVE-0-2026-119291)
Vulnerability from nvd – Published: 2026-10-30 15:52 – Updated: 2026-10-30 15:52
VLAI
EPSS
VEX
Title
zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory
Summary
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.4.0, @zuke/cli uses lstat to inspect scaffold names but then performs link-following reads, writes, and permission changes in zuke setup and zuke import. An attacker who supplies an untrusted cloned repository, template, or archive with a symbolic link at a scaffolded name can cause setup to overwrite a target outside the selected directory with the invoking user's permissions. The .gitignore path requires no flag, while --force permits a linked launcher target to be written and made executable; import can also read link-target content and incorporate it into the generated build file. This issue is fixed in version 1.4.0.
Severity
5.5 (Medium)
CWE
- CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/zuke-build/zuke/security/advis… | x_refsource_CONFIRM |
| https://github.com/zuke-build/zuke/pull/542 | x_refsource_MISC |
| https://github.com/zuke-build/zuke/commit/4257b0b… | x_refsource_MISC |
| https://github.com/zuke-build/zuke/releases/tag/c… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| zuke-build | zuke |
Affected:
< 1.4.0
|
{
"containers": {
"cna": {
"affected": [
{
"product": "zuke",
"vendor": "zuke-build",
"versions": [
{
"status": "affected",
"version": "\u003c 1.4.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.4.0, @zuke/cli uses lstat to inspect scaffold names but then performs link-following reads, writes, and permission changes in zuke setup and zuke import. An attacker who supplies an untrusted cloned repository, template, or archive with a symbolic link at a scaffolded name can cause setup to overwrite a target outside the selected directory with the invoking user\u0027s permissions. The .gitignore path requires no flag, while --force permits a linked launcher target to be written and made executable; import can also read link-target content and incorporate it into the generated build file. This issue is fixed in version 1.4.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T15:52:01.029Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/zuke-build/zuke/security/advisories/GHSA-hc8w-3fgv-22pw",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/zuke-build/zuke/security/advisories/GHSA-hc8w-3fgv-22pw"
},
{
"name": "https://github.com/zuke-build/zuke/pull/542",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/pull/542"
},
{
"name": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654"
},
{
"name": "https://github.com/zuke-build/zuke/releases/tag/cli-v1.4.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/releases/tag/cli-v1.4.0"
}
],
"source": {
"advisory": "GHSA-hc8w-3fgv-22pw",
"discovery": "UNKNOWN"
},
"title": "zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-119291",
"datePublished": "2026-10-30T15:52:01.029Z",
"dateReserved": "2026-10-29T18:50:28.065Z",
"dateUpdated": "2026-10-30T15:52:01.029Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-119290 (GCVE-0-2026-119290)
Vulnerability from nvd – Published: 2026-10-30 15:50 – Updated: 2026-10-30 16:38
VLAI
EPSS
VEX
Title
Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run
Summary
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered reportSummary(...) notes to GITHUB_STEP_SUMMARY through writeJobSummary without applying the redactor that protects resolved secret() values in console and persisted run output. A GitHub Actions build that places secret-derived text in a summary note can publish credentials in cleartext to everyone able to view the workflow run, including unauthenticated viewers of a public repository, and the durable summary remains exposed until the run is deleted. GitHub Actions masking directives do not protect the summary file, while runs outside GitHub Actions and builds that do not summarize secret-derived text are not affected. This issue is fixed in version 1.51.0.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-30 16:38 UTC
CWE
- CWE-532 - Insertion of Sensitive Information into Log File
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/zuke-build/zuke/security/advis… | x_refsource_CONFIRM |
| https://github.com/zuke-build/zuke/pull/547 | x_refsource_MISC |
| https://github.com/zuke-build/zuke/commit/a46fd72… | x_refsource_MISC |
| https://github.com/zuke-build/zuke/releases/tag/c… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| zuke-build | zuke |
Affected:
< 1.51.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-119290",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-30T16:38:41.243763Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T16:38:54.900Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "zuke",
"vendor": "zuke-build",
"versions": [
{
"status": "affected",
"version": "\u003c 1.51.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered reportSummary(...) notes to GITHUB_STEP_SUMMARY through writeJobSummary without applying the redactor that protects resolved secret() values in console and persisted run output. A GitHub Actions build that places secret-derived text in a summary note can publish credentials in cleartext to everyone able to view the workflow run, including unauthenticated viewers of a public repository, and the durable summary remains exposed until the run is deleted. GitHub Actions masking directives do not protect the summary file, while runs outside GitHub Actions and builds that do not summarize secret-derived text are not affected. This issue is fixed in version 1.51.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-532",
"description": "CWE-532: Insertion of Sensitive Information into Log File",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T15:50:46.959Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/zuke-build/zuke/security/advisories/GHSA-42wp-rrh6-vc23",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/zuke-build/zuke/security/advisories/GHSA-42wp-rrh6-vc23"
},
{
"name": "https://github.com/zuke-build/zuke/pull/547",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/pull/547"
},
{
"name": "https://github.com/zuke-build/zuke/commit/a46fd7287c913d937b4d0bb46d0c22b87ddd8ba7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/commit/a46fd7287c913d937b4d0bb46d0c22b87ddd8ba7"
},
{
"name": "https://github.com/zuke-build/zuke/releases/tag/core-v1.51.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/releases/tag/core-v1.51.0"
}
],
"source": {
"advisory": "GHSA-42wp-rrh6-vc23",
"discovery": "UNKNOWN"
},
"title": "Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-119290",
"datePublished": "2026-10-30T15:50:46.959Z",
"dateReserved": "2026-10-29T18:50:28.065Z",
"dateUpdated": "2026-10-30T16:38:54.900Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-119289 (GCVE-0-2026-119289)
Vulnerability from nvd – Published: 2026-10-30 15:48 – Updated: 2026-10-30 15:48
VLAI
EPSS
VEX
Title
Zuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who can dispatch the workflow can satisfy or block a release gate
Summary
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.10.0, the @zuke/gh githubWorkflow(...) gate correlates a dispatched workflow run using only a display-title marker that is visible in the workflow run list and can be copied by another dispatcher. In configurations where the external workflow repository grants workflow_dispatch permission to a party not equally trusted by the releasing repository, an attacker can dispatch a run with the marker and cause the gate to adopt its conclusion without verifying the event, ref, or creation window. A passing substituted run can authorize an unvalidated release, while a failed or cancelled run can block a valid release, and the persisted adopted run ID preserves the substitution across build resume. This issue is fixed in version 1.10.0.
Severity
7.1 (High)
CWE
- CWE-345 - Insufficient Verification of Data Authenticity
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/zuke-build/zuke/security/advis… | x_refsource_CONFIRM |
| https://github.com/zuke-build/zuke/pull/542 | x_refsource_MISC |
| https://github.com/zuke-build/zuke/commit/4257b0b… | x_refsource_MISC |
| https://github.com/zuke-build/zuke/releases/tag/g… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| zuke-build | zuke |
Affected:
< 1.10.0
|
{
"containers": {
"cna": {
"affected": [
{
"product": "zuke",
"vendor": "zuke-build",
"versions": [
{
"status": "affected",
"version": "\u003c 1.10.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.10.0, the @zuke/gh githubWorkflow(...) gate correlates a dispatched workflow run using only a display-title marker that is visible in the workflow run list and can be copied by another dispatcher. In configurations where the external workflow repository grants workflow_dispatch permission to a party not equally trusted by the releasing repository, an attacker can dispatch a run with the marker and cause the gate to adopt its conclusion without verifying the event, ref, or creation window. A passing substituted run can authorize an unvalidated release, while a failed or cancelled run can block a valid release, and the persisted adopted run ID preserves the substitution across build resume. This issue is fixed in version 1.10.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-345",
"description": "CWE-345: Insufficient Verification of Data Authenticity",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T15:48:59.726Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/zuke-build/zuke/security/advisories/GHSA-rrc8-3g8p-cm8p",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/zuke-build/zuke/security/advisories/GHSA-rrc8-3g8p-cm8p"
},
{
"name": "https://github.com/zuke-build/zuke/pull/542",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/pull/542"
},
{
"name": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654"
},
{
"name": "https://github.com/zuke-build/zuke/releases/tag/gh-v1.10.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/releases/tag/gh-v1.10.0"
}
],
"source": {
"advisory": "GHSA-rrc8-3g8p-cm8p",
"discovery": "UNKNOWN"
},
"title": "Zuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who can dispatch the workflow can satisfy or block a release gate"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-119289",
"datePublished": "2026-10-30T15:48:59.726Z",
"dateReserved": "2026-10-29T18:50:28.065Z",
"dateUpdated": "2026-10-30T15:48:59.726Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-119288 (GCVE-0-2026-119288)
Vulnerability from nvd – Published: 2026-10-30 15:47 – Updated: 2026-10-30 18:36
VLAI
EPSS
VEX
Title
Zuke: Argument injection on Windows: batch shims are launched through cmd.exe, which re-parses the command line
Summary
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core launches resolved Windows .cmd and .bat shims by prepending cmd /c, causing cmd.exe to reparse a command line assembled with C-runtime quoting rules. A build running on Windows that resolves a tool from node_modules/.bin and passes attacker-influenced text containing an unquoted &, |, or ^ metacharacter can execute an additional attacker-chosen command in the build's context with access to its credentials. POSIX platforms are not affected. This issue is fixed in version 1.51.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-30 18:25 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/zuke-build/zuke/security/advis… | x_refsource_CONFIRM |
| https://github.com/zuke-build/zuke/pull/542 | x_refsource_MISC |
| https://github.com/zuke-build/zuke/commit/4257b0b… | x_refsource_MISC |
| https://github.com/zuke-build/zuke/releases/tag/c… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| zuke-build | zuke |
Affected:
< 1.51.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-119288",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-30T18:25:54.186155Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T18:36:00.991Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "zuke",
"vendor": "zuke-build",
"versions": [
{
"status": "affected",
"version": "\u003c 1.51.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core launches resolved Windows .cmd and .bat shims by prepending cmd /c, causing cmd.exe to reparse a command line assembled with C-runtime quoting rules. A build running on Windows that resolves a tool from node_modules/.bin and passes attacker-influenced text containing an unquoted \u0026, |, or ^ metacharacter can execute an additional attacker-chosen command in the build\u0027s context with access to its credentials. POSIX platforms are not affected. This issue is fixed in version 1.51.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T15:47:23.790Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/zuke-build/zuke/security/advisories/GHSA-7h34-cmvx-hg95",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/zuke-build/zuke/security/advisories/GHSA-7h34-cmvx-hg95"
},
{
"name": "https://github.com/zuke-build/zuke/pull/542",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/pull/542"
},
{
"name": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654"
},
{
"name": "https://github.com/zuke-build/zuke/releases/tag/core-v1.51.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/releases/tag/core-v1.51.0"
}
],
"source": {
"advisory": "GHSA-7h34-cmvx-hg95",
"discovery": "UNKNOWN"
},
"title": "Zuke: Argument injection on Windows: batch shims are launched through cmd.exe, which re-parses the command line"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-119288",
"datePublished": "2026-10-30T15:47:23.790Z",
"dateReserved": "2026-10-29T18:50:28.065Z",
"dateUpdated": "2026-10-30T18:36:00.991Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-119287 (GCVE-0-2026-119287)
Vulnerability from nvd – Published: 2026-10-30 15:39 – Updated: 2026-10-30 15:39
VLAI
EPSS
VEX
Title
Zuke: Command-form registry descriptors bypass the MCP launch policy
Summary
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts command-form registry descriptors without applying the ZUKE_REGISTRY_LAUNCH_HOSTS authorization enforced for remote module descriptors. When zuke mcp --registry --allow-run reads a registry writable by another party and a run-capable caller invokes the affected tool, the registry writer can choose the program and arguments executed with the operator's environment and workspace access. The --allow-run and --protect name globs do not contain the issue because the descriptor supplies those names, and the optional destructive confirmation displays a description controlled by the same writer. The local default registry populated only through zuke register is not affected because that command writes module-form descriptors. This issue is fixed in version 1.51.0.
Severity
CWE
- CWE-862 - Missing Authorization
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/zuke-build/zuke/security/advis… | x_refsource_CONFIRM |
| https://github.com/zuke-build/zuke/pull/542 | x_refsource_MISC |
| https://github.com/zuke-build/zuke/commit/4257b0b… | x_refsource_MISC |
| https://github.com/zuke-build/zuke/releases/tag/c… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| zuke-build | zuke |
Affected:
< 1.51.0
|
{
"containers": {
"cna": {
"affected": [
{
"product": "zuke",
"vendor": "zuke-build",
"versions": [
{
"status": "affected",
"version": "\u003c 1.51.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts command-form registry descriptors without applying the ZUKE_REGISTRY_LAUNCH_HOSTS authorization enforced for remote module descriptors. When zuke mcp --registry --allow-run reads a registry writable by another party and a run-capable caller invokes the affected tool, the registry writer can choose the program and arguments executed with the operator\u0027s environment and workspace access. The --allow-run and --protect name globs do not contain the issue because the descriptor supplies those names, and the optional destructive confirmation displays a description controlled by the same writer. The local default registry populated only through zuke register is not affected because that command writes module-form descriptors. This issue is fixed in version 1.51.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T15:39:52.468Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/zuke-build/zuke/security/advisories/GHSA-2rmh-5cw4-33gr",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/zuke-build/zuke/security/advisories/GHSA-2rmh-5cw4-33gr"
},
{
"name": "https://github.com/zuke-build/zuke/pull/542",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/pull/542"
},
{
"name": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654"
},
{
"name": "https://github.com/zuke-build/zuke/releases/tag/core-v1.51.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/releases/tag/core-v1.51.0"
}
],
"source": {
"advisory": "GHSA-2rmh-5cw4-33gr",
"discovery": "UNKNOWN"
},
"title": "Zuke: Command-form registry descriptors bypass the MCP launch policy"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-119287",
"datePublished": "2026-10-30T15:39:52.468Z",
"dateReserved": "2026-10-29T18:50:28.065Z",
"dateUpdated": "2026-10-30T15:39:52.468Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-119291 (GCVE-0-2026-119291)
Vulnerability from cvelistv5 – Published: 2026-10-30 15:52 – Updated: 2026-10-30 15:52
VLAI
EPSS
VEX
Title
zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory
Summary
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.4.0, @zuke/cli uses lstat to inspect scaffold names but then performs link-following reads, writes, and permission changes in zuke setup and zuke import. An attacker who supplies an untrusted cloned repository, template, or archive with a symbolic link at a scaffolded name can cause setup to overwrite a target outside the selected directory with the invoking user's permissions. The .gitignore path requires no flag, while --force permits a linked launcher target to be written and made executable; import can also read link-target content and incorporate it into the generated build file. This issue is fixed in version 1.4.0.
Severity
5.5 (Medium)
CWE
- CWE-59 - Improper Link Resolution Before File Access ('Link Following')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/zuke-build/zuke/security/advis… | x_refsource_CONFIRM |
| https://github.com/zuke-build/zuke/pull/542 | x_refsource_MISC |
| https://github.com/zuke-build/zuke/commit/4257b0b… | x_refsource_MISC |
| https://github.com/zuke-build/zuke/releases/tag/c… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| zuke-build | zuke |
Affected:
< 1.4.0
|
{
"containers": {
"cna": {
"affected": [
{
"product": "zuke",
"vendor": "zuke-build",
"versions": [
{
"status": "affected",
"version": "\u003c 1.4.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.4.0, @zuke/cli uses lstat to inspect scaffold names but then performs link-following reads, writes, and permission changes in zuke setup and zuke import. An attacker who supplies an untrusted cloned repository, template, or archive with a symbolic link at a scaffolded name can cause setup to overwrite a target outside the selected directory with the invoking user\u0027s permissions. The .gitignore path requires no flag, while --force permits a linked launcher target to be written and made executable; import can also read link-target content and incorporate it into the generated build file. This issue is fixed in version 1.4.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "LOCAL",
"availabilityImpact": "NONE",
"baseScore": 5.5,
"baseSeverity": "MEDIUM",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-59",
"description": "CWE-59: Improper Link Resolution Before File Access (\u0027Link Following\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T15:52:01.029Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/zuke-build/zuke/security/advisories/GHSA-hc8w-3fgv-22pw",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/zuke-build/zuke/security/advisories/GHSA-hc8w-3fgv-22pw"
},
{
"name": "https://github.com/zuke-build/zuke/pull/542",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/pull/542"
},
{
"name": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654"
},
{
"name": "https://github.com/zuke-build/zuke/releases/tag/cli-v1.4.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/releases/tag/cli-v1.4.0"
}
],
"source": {
"advisory": "GHSA-hc8w-3fgv-22pw",
"discovery": "UNKNOWN"
},
"title": "zuke setup and zuke import follow symbolic links planted at scaffold names, allowing writes outside the target directory"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-119291",
"datePublished": "2026-10-30T15:52:01.029Z",
"dateReserved": "2026-10-29T18:50:28.065Z",
"dateUpdated": "2026-10-30T15:52:01.029Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-119290 (GCVE-0-2026-119290)
Vulnerability from cvelistv5 – Published: 2026-10-30 15:50 – Updated: 2026-10-30 16:38
VLAI
EPSS
VEX
Title
Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run
Summary
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered reportSummary(...) notes to GITHUB_STEP_SUMMARY through writeJobSummary without applying the redactor that protects resolved secret() values in console and persisted run output. A GitHub Actions build that places secret-derived text in a summary note can publish credentials in cleartext to everyone able to view the workflow run, including unauthenticated viewers of a public repository, and the durable summary remains exposed until the run is deleted. GitHub Actions masking directives do not protect the summary file, while runs outside GitHub Actions and builds that do not summarize secret-derived text are not affected. This issue is fixed in version 1.51.0.
Severity
7.5 (High)
SSVC
Exploitation: none
Automatable: yes
Technical Impact: partial
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-30 16:38 UTC
CWE
- CWE-532 - Insertion of Sensitive Information into Log File
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/zuke-build/zuke/security/advis… | x_refsource_CONFIRM |
| https://github.com/zuke-build/zuke/pull/547 | x_refsource_MISC |
| https://github.com/zuke-build/zuke/commit/a46fd72… | x_refsource_MISC |
| https://github.com/zuke-build/zuke/releases/tag/c… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| zuke-build | zuke |
Affected:
< 1.51.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-119290",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "yes"
},
{
"Technical Impact": "partial"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-30T16:38:41.243763Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T16:38:54.900Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "zuke",
"vendor": "zuke-build",
"versions": [
{
"status": "affected",
"version": "\u003c 1.51.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core writes rendered reportSummary(...) notes to GITHUB_STEP_SUMMARY through writeJobSummary without applying the redactor that protects resolved secret() values in console and persisted run output. A GitHub Actions build that places secret-derived text in a summary note can publish credentials in cleartext to everyone able to view the workflow run, including unauthenticated viewers of a public repository, and the durable summary remains exposed until the run is deleted. GitHub Actions masking directives do not protect the summary file, while runs outside GitHub Actions and builds that do not summarize secret-derived text are not affected. This issue is fixed in version 1.51.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "NONE",
"baseScore": 7.5,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "NONE",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-532",
"description": "CWE-532: Insertion of Sensitive Information into Log File",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T15:50:46.959Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/zuke-build/zuke/security/advisories/GHSA-42wp-rrh6-vc23",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/zuke-build/zuke/security/advisories/GHSA-42wp-rrh6-vc23"
},
{
"name": "https://github.com/zuke-build/zuke/pull/547",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/pull/547"
},
{
"name": "https://github.com/zuke-build/zuke/commit/a46fd7287c913d937b4d0bb46d0c22b87ddd8ba7",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/commit/a46fd7287c913d937b4d0bb46d0c22b87ddd8ba7"
},
{
"name": "https://github.com/zuke-build/zuke/releases/tag/core-v1.51.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/releases/tag/core-v1.51.0"
}
],
"source": {
"advisory": "GHSA-42wp-rrh6-vc23",
"discovery": "UNKNOWN"
},
"title": "Zuke: Resolved secret() values are written to GITHUB_STEP_SUMMARY in the clear, disclosing them to anyone who can view the workflow run"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-119290",
"datePublished": "2026-10-30T15:50:46.959Z",
"dateReserved": "2026-10-29T18:50:28.065Z",
"dateUpdated": "2026-10-30T16:38:54.900Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-119289 (GCVE-0-2026-119289)
Vulnerability from cvelistv5 – Published: 2026-10-30 15:48 – Updated: 2026-10-30 15:48
VLAI
EPSS
VEX
Title
Zuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who can dispatch the workflow can satisfy or block a release gate
Summary
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.10.0, the @zuke/gh githubWorkflow(...) gate correlates a dispatched workflow run using only a display-title marker that is visible in the workflow run list and can be copied by another dispatcher. In configurations where the external workflow repository grants workflow_dispatch permission to a party not equally trusted by the releasing repository, an attacker can dispatch a run with the marker and cause the gate to adopt its conclusion without verifying the event, ref, or creation window. A passing substituted run can authorize an unvalidated release, while a failed or cancelled run can block a valid release, and the persisted adopted run ID preserves the substitution across build resume. This issue is fixed in version 1.10.0.
Severity
7.1 (High)
CWE
- CWE-345 - Insufficient Verification of Data Authenticity
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/zuke-build/zuke/security/advis… | x_refsource_CONFIRM |
| https://github.com/zuke-build/zuke/pull/542 | x_refsource_MISC |
| https://github.com/zuke-build/zuke/commit/4257b0b… | x_refsource_MISC |
| https://github.com/zuke-build/zuke/releases/tag/g… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| zuke-build | zuke |
Affected:
< 1.10.0
|
{
"containers": {
"cna": {
"affected": [
{
"product": "zuke",
"vendor": "zuke-build",
"versions": [
{
"status": "affected",
"version": "\u003c 1.10.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.10.0, the @zuke/gh githubWorkflow(...) gate correlates a dispatched workflow run using only a display-title marker that is visible in the workflow run list and can be copied by another dispatcher. In configurations where the external workflow repository grants workflow_dispatch permission to a party not equally trusted by the releasing repository, an attacker can dispatch a run with the marker and cause the gate to adopt its conclusion without verifying the event, ref, or creation window. A passing substituted run can authorize an unvalidated release, while a failed or cancelled run can block a valid release, and the persisted adopted run ID preserves the substitution across build resume. This issue is fixed in version 1.10.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "NETWORK",
"availabilityImpact": "LOW",
"baseScore": 7.1,
"baseSeverity": "HIGH",
"confidentialityImpact": "NONE",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "CHANGED",
"userInteraction": "NONE",
"vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:L",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-345",
"description": "CWE-345: Insufficient Verification of Data Authenticity",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T15:48:59.726Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/zuke-build/zuke/security/advisories/GHSA-rrc8-3g8p-cm8p",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/zuke-build/zuke/security/advisories/GHSA-rrc8-3g8p-cm8p"
},
{
"name": "https://github.com/zuke-build/zuke/pull/542",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/pull/542"
},
{
"name": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654"
},
{
"name": "https://github.com/zuke-build/zuke/releases/tag/gh-v1.10.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/releases/tag/gh-v1.10.0"
}
],
"source": {
"advisory": "GHSA-rrc8-3g8p-cm8p",
"discovery": "UNKNOWN"
},
"title": "Zuke: githubWorkflow adopts any workflow run whose title matches its marker, so anyone who can dispatch the workflow can satisfy or block a release gate"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-119289",
"datePublished": "2026-10-30T15:48:59.726Z",
"dateReserved": "2026-10-29T18:50:28.065Z",
"dateUpdated": "2026-10-30T15:48:59.726Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-119288 (GCVE-0-2026-119288)
Vulnerability from cvelistv5 – Published: 2026-10-30 15:47 – Updated: 2026-10-30 18:36
VLAI
EPSS
VEX
Title
Zuke: Argument injection on Windows: batch shims are launched through cmd.exe, which re-parses the command line
Summary
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core launches resolved Windows .cmd and .bat shims by prepending cmd /c, causing cmd.exe to reparse a command line assembled with C-runtime quoting rules. A build running on Windows that resolves a tool from node_modules/.bin and passes attacker-influenced text containing an unquoted &, |, or ^ metacharacter can execute an additional attacker-chosen command in the build's context with access to its credentials. POSIX platforms are not affected. This issue is fixed in version 1.51.0.
Severity
SSVC
Exploitation: none
Automatable: no
Technical Impact: total
CISA Coordinator · CISA-ADP (v2.0.3)
Decision recorded 2026-10-30 18:25 UTC
CWE
- CWE-78 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/zuke-build/zuke/security/advis… | x_refsource_CONFIRM |
| https://github.com/zuke-build/zuke/pull/542 | x_refsource_MISC |
| https://github.com/zuke-build/zuke/commit/4257b0b… | x_refsource_MISC |
| https://github.com/zuke-build/zuke/releases/tag/c… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| zuke-build | zuke |
Affected:
< 1.51.0
|
{
"containers": {
"adp": [
{
"metrics": [
{
"other": {
"content": {
"id": "CVE-2026-119288",
"options": [
{
"Exploitation": "none"
},
{
"Automatable": "no"
},
{
"Technical Impact": "total"
}
],
"role": "CISA Coordinator",
"timestamp": "2026-10-30T18:25:54.186155Z",
"version": "2.0.3"
},
"type": "ssvc"
}
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T18:36:00.991Z",
"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
"shortName": "CISA-ADP"
},
"title": "CISA ADP Vulnrichment"
}
],
"cna": {
"affected": [
{
"product": "zuke",
"vendor": "zuke-build",
"versions": [
{
"status": "affected",
"version": "\u003c 1.51.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, @zuke/core launches resolved Windows .cmd and .bat shims by prepending cmd /c, causing cmd.exe to reparse a command line assembled with C-runtime quoting rules. A build running on Windows that resolves a tool from node_modules/.bin and passes attacker-influenced text containing an unquoted \u0026, |, or ^ metacharacter can execute an additional attacker-chosen command in the build\u0027s context with access to its credentials. POSIX platforms are not affected. This issue is fixed in version 1.51.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "HIGH",
"attackVector": "LOCAL",
"availabilityImpact": "HIGH",
"baseScore": 7,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "NONE",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-78",
"description": "CWE-78: Improper Neutralization of Special Elements used in an OS Command (\u0027OS Command Injection\u0027)",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T15:47:23.790Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/zuke-build/zuke/security/advisories/GHSA-7h34-cmvx-hg95",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/zuke-build/zuke/security/advisories/GHSA-7h34-cmvx-hg95"
},
{
"name": "https://github.com/zuke-build/zuke/pull/542",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/pull/542"
},
{
"name": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654"
},
{
"name": "https://github.com/zuke-build/zuke/releases/tag/core-v1.51.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/releases/tag/core-v1.51.0"
}
],
"source": {
"advisory": "GHSA-7h34-cmvx-hg95",
"discovery": "UNKNOWN"
},
"title": "Zuke: Argument injection on Windows: batch shims are launched through cmd.exe, which re-parses the command line"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-119288",
"datePublished": "2026-10-30T15:47:23.790Z",
"dateReserved": "2026-10-29T18:50:28.065Z",
"dateUpdated": "2026-10-30T18:36:00.991Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}
CVE-2026-119287 (GCVE-0-2026-119287)
Vulnerability from cvelistv5 – Published: 2026-10-30 15:39 – Updated: 2026-10-30 15:39
VLAI
EPSS
VEX
Title
Zuke: Command-form registry descriptors bypass the MCP launch policy
Summary
Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts command-form registry descriptors without applying the ZUKE_REGISTRY_LAUNCH_HOSTS authorization enforced for remote module descriptors. When zuke mcp --registry --allow-run reads a registry writable by another party and a run-capable caller invokes the affected tool, the registry writer can choose the program and arguments executed with the operator's environment and workspace access. The --allow-run and --protect name globs do not contain the issue because the descriptor supplies those names, and the optional destructive confirmation displays a description controlled by the same writer. The local default registry populated only through zuke register is not affected because that command writes module-form descriptors. This issue is fixed in version 1.51.0.
Severity
CWE
- CWE-862 - Missing Authorization
Assigner
References
4 references
| URL | Tags |
|---|---|
| https://github.com/zuke-build/zuke/security/advis… | x_refsource_CONFIRM |
| https://github.com/zuke-build/zuke/pull/542 | x_refsource_MISC |
| https://github.com/zuke-build/zuke/commit/4257b0b… | x_refsource_MISC |
| https://github.com/zuke-build/zuke/releases/tag/c… | x_refsource_MISC |
Impacted products
1 product
| Vendor | Product | Version | |
|---|---|---|---|
| zuke-build | zuke |
Affected:
< 1.51.0
|
{
"containers": {
"cna": {
"affected": [
{
"product": "zuke",
"vendor": "zuke-build",
"versions": [
{
"status": "affected",
"version": "\u003c 1.51.0"
}
]
}
],
"descriptions": [
{
"lang": "en",
"value": "Zuke is a code-first, strongly typed build automation system for Deno. Prior to 1.51.0, the @zuke/core MCP registry mode accepts command-form registry descriptors without applying the ZUKE_REGISTRY_LAUNCH_HOSTS authorization enforced for remote module descriptors. When zuke mcp --registry --allow-run reads a registry writable by another party and a run-capable caller invokes the affected tool, the registry writer can choose the program and arguments executed with the operator\u0027s environment and workspace access. The --allow-run and --protect name globs do not contain the issue because the descriptor supplies those names, and the optional destructive confirmation displays a description controlled by the same writer. The local default registry populated only through zuke register is not affected because that command writes module-form descriptors. This issue is fixed in version 1.51.0."
}
],
"metrics": [
{
"cvssV3_1": {
"attackComplexity": "LOW",
"attackVector": "NETWORK",
"availabilityImpact": "HIGH",
"baseScore": 8,
"baseSeverity": "HIGH",
"confidentialityImpact": "HIGH",
"integrityImpact": "HIGH",
"privilegesRequired": "LOW",
"scope": "UNCHANGED",
"userInteraction": "REQUIRED",
"vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:H",
"version": "3.1"
}
}
],
"problemTypes": [
{
"descriptions": [
{
"cweId": "CWE-862",
"description": "CWE-862: Missing Authorization",
"lang": "en",
"type": "CWE"
}
]
}
],
"providerMetadata": {
"dateUpdated": "2026-10-30T15:39:52.468Z",
"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"shortName": "GitHub_M"
},
"references": [
{
"name": "https://github.com/zuke-build/zuke/security/advisories/GHSA-2rmh-5cw4-33gr",
"tags": [
"x_refsource_CONFIRM"
],
"url": "https://github.com/zuke-build/zuke/security/advisories/GHSA-2rmh-5cw4-33gr"
},
{
"name": "https://github.com/zuke-build/zuke/pull/542",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/pull/542"
},
{
"name": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/commit/4257b0bc5ef5e387a44f913349646d4baccd1654"
},
{
"name": "https://github.com/zuke-build/zuke/releases/tag/core-v1.51.0",
"tags": [
"x_refsource_MISC"
],
"url": "https://github.com/zuke-build/zuke/releases/tag/core-v1.51.0"
}
],
"source": {
"advisory": "GHSA-2rmh-5cw4-33gr",
"discovery": "UNKNOWN"
},
"title": "Zuke: Command-form registry descriptors bypass the MCP launch policy"
}
},
"cveMetadata": {
"assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa",
"assignerShortName": "GitHub_M",
"cveId": "CVE-2026-119287",
"datePublished": "2026-10-30T15:39:52.468Z",
"dateReserved": "2026-10-29T18:50:28.065Z",
"dateUpdated": "2026-10-30T15:39:52.468Z",
"state": "PUBLISHED"
},
"dataType": "CVE_RECORD",
"dataVersion": "5.2"
}