Code Execution Vulnerability in Salt Documentation Repository by Salty

CVE-2026-55675

What is CVE-2026-55675?

The Salty documentation repository has a vulnerability that allows threat actors to execute malicious code through untrusted forked pull requests. Prior to a recent fix, the workflow processes could inadvertently execute attacker-controlled scripts, compromising sensitive credentials like CF_API_TOKEN, GH_TOKEN, MKDOCS_GIT_COMMITTERS_APIKEY, and GITHUB_TOKEN. This flaw highlights the risks associated with unchecked forked contributions and emphasizes the importance of securing workflows to prevent potential unauthorized actions in the base repository.

References