CVE-2026-88888 | renovatebot Renovate up to 44.14.6 Mix manager command injection

September 10, 2026 Yanac

A vulnerability labeled as problematic has been found in renovatebot Renovate up to 44.14.6. Affected by this issue is some unknown functionality of the component Mix manager. Such manipulation leads to command injection.

This vulnerability is uniquely identified as CVE-2026-88888. Local access is required to approach this attack. No exploit exists.

The affected component should be upgraded.VulDB Recent EntriesRead More