Shodan
Vulnerabilities
Vulnerable Software

Vulnerability Details CVE-2026-34041

act is a project which allows for local running of github actions. Prior to version 0.2.86, act unconditionally processes the deprecated ::set-env:: and ::add-path:: workflow commands, which was disabled due to environment injection risks. When a workflow step echoes untrusted data to stdout, an attacker can inject these commands to set arbitrary environment variables or modify the PATH for all subsequent steps in the job. This issue has been patched in version 0.2.86.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.0
EPSS Ranking 6.0%
CVSS Severity
CVSS v3 Score 9.8
Products affected by CVE-2026-34041
  • Nektos » Act » Version: 0.0.1
    cpe:2.3:a:nektos:act:0.0.1
  • Nektos » Act » Version: 0.0.2
    cpe:2.3:a:nektos:act:0.0.2
  • Nektos » Act » Version: 0.0.3
    cpe:2.3:a:nektos:act:0.0.3
  • Nektos » Act » Version: 0.0.4
    cpe:2.3:a:nektos:act:0.0.4
  • Nektos » Act » Version: 0.0.5
    cpe:2.3:a:nektos:act:0.0.5
  • Nektos » Act » Version: 0.1.0
    cpe:2.3:a:nektos:act:0.1.0
  • Nektos » Act » Version: 0.1.1
    cpe:2.3:a:nektos:act:0.1.1
  • Nektos » Act » Version: 0.1.2
    cpe:2.3:a:nektos:act:0.1.2
  • Nektos » Act » Version: 0.1.3
    cpe:2.3:a:nektos:act:0.1.3
  • Nektos » Act » Version: 0.2.0
    cpe:2.3:a:nektos:act:0.2.0
  • Nektos » Act » Version: 0.2.1
    cpe:2.3:a:nektos:act:0.2.1
  • Nektos » Act » Version: 0.2.10
    cpe:2.3:a:nektos:act:0.2.10
  • Nektos » Act » Version: 0.2.11
    cpe:2.3:a:nektos:act:0.2.11
  • Nektos » Act » Version: 0.2.12
    cpe:2.3:a:nektos:act:0.2.12
  • Nektos » Act » Version: 0.2.13
    cpe:2.3:a:nektos:act:0.2.13
  • Nektos » Act » Version: 0.2.14
    cpe:2.3:a:nektos:act:0.2.14
  • Nektos » Act » Version: 0.2.15
    cpe:2.3:a:nektos:act:0.2.15
  • Nektos » Act » Version: 0.2.16
    cpe:2.3:a:nektos:act:0.2.16
  • Nektos » Act » Version: 0.2.17
    cpe:2.3:a:nektos:act:0.2.17
  • Nektos » Act » Version: 0.2.18
    cpe:2.3:a:nektos:act:0.2.18
  • Nektos » Act » Version: 0.2.19
    cpe:2.3:a:nektos:act:0.2.19
  • Nektos » Act » Version: 0.2.2
    cpe:2.3:a:nektos:act:0.2.2
  • Nektos » Act » Version: 0.2.20
    cpe:2.3:a:nektos:act:0.2.20
  • Nektos » Act » Version: 0.2.21
    cpe:2.3:a:nektos:act:0.2.21
  • Nektos » Act » Version: 0.2.22
    cpe:2.3:a:nektos:act:0.2.22
  • Nektos » Act » Version: 0.2.23
    cpe:2.3:a:nektos:act:0.2.23
  • Nektos » Act » Version: 0.2.24
    cpe:2.3:a:nektos:act:0.2.24
  • Nektos » Act » Version: 0.2.25
    cpe:2.3:a:nektos:act:0.2.25
  • Nektos » Act » Version: 0.2.26
    cpe:2.3:a:nektos:act:0.2.26
  • Nektos » Act » Version: 0.2.27
    cpe:2.3:a:nektos:act:0.2.27
  • Nektos » Act » Version: 0.2.28
    cpe:2.3:a:nektos:act:0.2.28
  • Nektos » Act » Version: 0.2.29
    cpe:2.3:a:nektos:act:0.2.29
  • Nektos » Act » Version: 0.2.3
    cpe:2.3:a:nektos:act:0.2.3
  • Nektos » Act » Version: 0.2.30
    cpe:2.3:a:nektos:act:0.2.30
  • Nektos » Act » Version: 0.2.31
    cpe:2.3:a:nektos:act:0.2.31
  • Nektos » Act » Version: 0.2.32
    cpe:2.3:a:nektos:act:0.2.32
  • Nektos » Act » Version: 0.2.33
    cpe:2.3:a:nektos:act:0.2.33
  • Nektos » Act » Version: 0.2.34
    cpe:2.3:a:nektos:act:0.2.34
  • Nektos » Act » Version: 0.2.35
    cpe:2.3:a:nektos:act:0.2.35
  • Nektos » Act » Version: 0.2.36
    cpe:2.3:a:nektos:act:0.2.36
  • Nektos » Act » Version: 0.2.37
    cpe:2.3:a:nektos:act:0.2.37
  • Nektos » Act » Version: 0.2.38
    cpe:2.3:a:nektos:act:0.2.38
  • Nektos » Act » Version: 0.2.39
    cpe:2.3:a:nektos:act:0.2.39
  • Nektos » Act » Version: 0.2.4
    cpe:2.3:a:nektos:act:0.2.4
  • Nektos » Act » Version: 0.2.40
    cpe:2.3:a:nektos:act:0.2.40
  • Nektos » Act » Version: 0.2.41
    cpe:2.3:a:nektos:act:0.2.41
  • Nektos » Act » Version: 0.2.42
    cpe:2.3:a:nektos:act:0.2.42
  • Nektos » Act » Version: 0.2.43
    cpe:2.3:a:nektos:act:0.2.43
  • Nektos » Act » Version: 0.2.44
    cpe:2.3:a:nektos:act:0.2.44
  • Nektos » Act » Version: 0.2.45
    cpe:2.3:a:nektos:act:0.2.45
  • Nektos » Act » Version: 0.2.46
    cpe:2.3:a:nektos:act:0.2.46
  • Nektos » Act » Version: 0.2.47
    cpe:2.3:a:nektos:act:0.2.47
  • Nektos » Act » Version: 0.2.48
    cpe:2.3:a:nektos:act:0.2.48
  • Nektos » Act » Version: 0.2.49
    cpe:2.3:a:nektos:act:0.2.49
  • Nektos » Act » Version: 0.2.5
    cpe:2.3:a:nektos:act:0.2.5
  • Nektos » Act » Version: 0.2.50
    cpe:2.3:a:nektos:act:0.2.50
  • Nektos » Act » Version: 0.2.51
    cpe:2.3:a:nektos:act:0.2.51
  • Nektos » Act » Version: 0.2.52
    cpe:2.3:a:nektos:act:0.2.52
  • Nektos » Act » Version: 0.2.53
    cpe:2.3:a:nektos:act:0.2.53
  • Nektos » Act » Version: 0.2.54
    cpe:2.3:a:nektos:act:0.2.54
  • Nektos » Act » Version: 0.2.55
    cpe:2.3:a:nektos:act:0.2.55
  • Nektos » Act » Version: 0.2.56
    cpe:2.3:a:nektos:act:0.2.56
  • Nektos » Act » Version: 0.2.57
    cpe:2.3:a:nektos:act:0.2.57
  • Nektos » Act » Version: 0.2.58
    cpe:2.3:a:nektos:act:0.2.58
  • Nektos » Act » Version: 0.2.59
    cpe:2.3:a:nektos:act:0.2.59
  • Nektos » Act » Version: 0.2.6
    cpe:2.3:a:nektos:act:0.2.6
  • Nektos » Act » Version: 0.2.60
    cpe:2.3:a:nektos:act:0.2.60
  • Nektos » Act » Version: 0.2.61
    cpe:2.3:a:nektos:act:0.2.61
  • Nektos » Act » Version: 0.2.62
    cpe:2.3:a:nektos:act:0.2.62
  • Nektos » Act » Version: 0.2.63
    cpe:2.3:a:nektos:act:0.2.63
  • Nektos » Act » Version: 0.2.64
    cpe:2.3:a:nektos:act:0.2.64
  • Nektos » Act » Version: 0.2.65
    cpe:2.3:a:nektos:act:0.2.65
  • Nektos » Act » Version: 0.2.66
    cpe:2.3:a:nektos:act:0.2.66
  • Nektos » Act » Version: 0.2.67
    cpe:2.3:a:nektos:act:0.2.67
  • Nektos » Act » Version: 0.2.68
    cpe:2.3:a:nektos:act:0.2.68
  • Nektos » Act » Version: 0.2.69
    cpe:2.3:a:nektos:act:0.2.69
  • Nektos » Act » Version: 0.2.7
    cpe:2.3:a:nektos:act:0.2.7
  • Nektos » Act » Version: 0.2.70
    cpe:2.3:a:nektos:act:0.2.70
  • Nektos » Act » Version: 0.2.71
    cpe:2.3:a:nektos:act:0.2.71
  • Nektos » Act » Version: 0.2.72
    cpe:2.3:a:nektos:act:0.2.72
  • Nektos » Act » Version: 0.2.73
    cpe:2.3:a:nektos:act:0.2.73
  • Nektos » Act » Version: 0.2.74
    cpe:2.3:a:nektos:act:0.2.74
  • Nektos » Act » Version: 0.2.75
    cpe:2.3:a:nektos:act:0.2.75
  • Nektos » Act » Version: 0.2.76
    cpe:2.3:a:nektos:act:0.2.76
  • Nektos » Act » Version: 0.2.77
    cpe:2.3:a:nektos:act:0.2.77
  • Nektos » Act » Version: 0.2.78
    cpe:2.3:a:nektos:act:0.2.78
  • Nektos » Act » Version: 0.2.79
    cpe:2.3:a:nektos:act:0.2.79
  • Nektos » Act » Version: 0.2.8
    cpe:2.3:a:nektos:act:0.2.8
  • Nektos » Act » Version: 0.2.80
    cpe:2.3:a:nektos:act:0.2.80
  • Nektos » Act » Version: 0.2.81
    cpe:2.3:a:nektos:act:0.2.81
  • Nektos » Act » Version: 0.2.82
    cpe:2.3:a:nektos:act:0.2.82
  • Nektos » Act » Version: 0.2.83
    cpe:2.3:a:nektos:act:0.2.83
  • Nektos » Act » Version: 0.2.84
    cpe:2.3:a:nektos:act:0.2.84
  • Nektos » Act » Version: 0.2.85
    cpe:2.3:a:nektos:act:0.2.85
  • Nektos » Act » Version: 0.2.9
    cpe:2.3:a:nektos:act:0.2.9


Products
Pricing
Contact Us

Shodan ® - All rights reserved