CVE-2026-55576 | MaaAssistantArknights Pull Request Title release-preparation.yml pull_request.title os command injection

July 16, 2026 Yanac

A vulnerability, which was classified as very critical, was found in MaaAssistantArknights. Affected is an unknown function of the file .github/workflows/release-preparation.yml of the component Pull Request Title Handler. Executing a manipulation of the argument pull_request.title can lead to os command injection.

The identification of this vulnerability is CVE-2026-55576. The attack may be launched remotely. There is no exploit available.VulDB Recent EntriesRead More