Vulnerability in Black Lantern Security Bbot
CVE-2026-12567
The github_workflows module constructs local directory paths from user-controlled repository names without validating for symlinks. A local attacker sharing the scan directory can plant a symlink at the predictable output path, causing wor…
CVSS v3 metric
CVSS v3 base score 2.2 (Low). Vector: CVSS:3.1/AV:L/AC:H/PR:L/UI:R/S:U/C:N/I:L/A:N.
Affected products
- Black Lantern Security Bbot — versions 2.0.0
Weakness classification (CWE)
References
Frequently asked questions
- What is CVE-2026-12567?
- CVE-2026-12567 is a low-severity vulnerability in Black Lantern Security Bbot, classified under Improper Link Resolution Before File Access. CVSS score: 2.2/10. Published 2026-06-17.
- How severe is CVE-2026-12567?
- Low severity. CVSS v3 base score is 2.2 out of 10.