CVE-2026-44220: ciguard: discover_pipeline_files follows symlinks out of scan root

May 5, 2026 (updated May 15, 2026)

The discover_pipeline_files() function in src/ciguard/discovery.py (introduced in v0.8.0 and used by the MCP scan_repo tool shipped in v0.8.1) walks a directory tree following symlinks, with cycle protection via tracking visited resolved paths. An attacker who can plant a symlink in a directory the user (or AI agent) scans can cause discovery to walk into the symlink target and return paths to pipeline-shaped files outside the requested root.

References

github.com/Jo-Jo98/ciguard/releases/tag/v0.8.2
github.com/Jo-Jo98/ciguard/releases/tag/v0.8.3
github.com/Jo-Jo98/ciguard/security/advisories/GHSA-8cxw-cc62-q28v
github.com/advisories/GHSA-8cxw-cc62-q28v
nvd.nist.gov/vuln/detail/CVE-2026-44220

Code Behaviors & Features

Detect and mitigate CVE-2026-44220 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →