CVE-2026-58424

10th percentile — higher than 10% of all known CVEs

A vulnerability in the workflow approval gate mechanism of the repository management system allows bypassing the approval gate for pull requests from permanent forks. An attacker can submit a pull request from a permanent fork without the required approval.

The risk involves the possibility of introducing unauthorized changes to the source code without going through the review and approval process, which could lead to malicious code injection or repository integrity compromise.

It is recommended to immediately update the system to a version containing the fix for this vulnerability and verify the configuration of approval rules for pull requests from forks.