RCE in Dbt-labs Dbt-core

CVE-2026-39382

dbt enables data analysts and engineers to transform their data using the same practices that software engineers use to build applications. Inside the reusable workflow dbt-labs/actions/blob/main/.github/workflows/open-issue-in-repo.yml, t…

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.004 (31.3th percentile) — read the EPSS interpretation.