CVE-2026-12171

Summary

The auto-changelog tool allows untrusted repository configuration to execute arbitrary code with the privileges of the running process, enabling remote code execution through attacker-controlled configuration files. This vulnerability is particularly dangerous in CI/CD workflows where untrusted code is checked out and processed.

Exploitability

Exploitation is relatively straightforward when a CI workflow checks out untrusted pull requests or repositories, requiring only that the auto-changelog tool be executed on attacker-controlled content without the --unsafe-config flag.

Blast radius

The impact could be severe in CI environments where secrets are accessible to the running process, potentially allowing attackers to exfiltrate sensitive data or gain full access to CI infrastructure.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to version 2.6.1 or later, which treats in-repository configuration as untrusted and refuses to execute with vulnerable options unless --unsafe-config flag is explicitly passed.

Analysis generated locally by garnet-coder (no data left the box). AI-assisted — verify against primary sources before acting.