CVE-2026-55158 | wktk conflibot up to 1.2.0 Command Execution src/index.ts exec head.ref os command injection

September 15, 2026 Yanac

A vulnerability was found in wktk conflibot up to 1.2.0. It has been classified as critical. Impacted is the function exec of the file src/index.ts of the component Command Execution. The manipulation of the argument head.ref leads to os command injection.

This vulnerability is referenced as CVE-2026-55158. Remote exploitation of the attack is possible. No exploit is available.

Upgrading the affected component is recommended.VulDB Recent EntriesRead More