What’s Vulnerable › Products

nektos act vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 3 published in the last 12 months.

Check whether your nektos act version is affected

Latest nektos act vulnerabilities

• CVE-2026-76847 — act 0.2.81 through 0.2.89 Missing Authorization in the Artifacts V4 Backend (CVSS 8.8)
• CVE-2026-34042 — act: actions/cache server allows malicious cache injection (CVSS 8.2)
• CVE-2026-34041 — act: Unrestricted set-env and add-path command processing enables environment injection (CVSS 9.8)