CVE-2026-47174— Duck Site: Untrusted pull request code can trigger privileged production deployment
Quick assessment
Affected
duck-organization duck-site
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Duck Site是Duck Organization开源的一个网站内容管理工具。 Duck Site 1.0.1之前版本存在安全漏洞，该漏洞源于部署工作流条件检查不当，可能导致攻击者控制的拉取请求代码成为已部署的生产站点镜像。
Possible ATT&CK Techniques 1 AI
T1656Affected Version Matrix 1
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| duck-organization | duck-site | < 1.0.1 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-47174
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Duck Site: Untrusted pull request code can trigger privileged production deployment
Source: CVE Program / CVE List V5
Vulnerability Description
In Duck Site before version 1.0.1, the repository has a deploy workflow that runs after the build workflow completes. The build workflow runs on pull requests, while the deploy workflow runs with package-write permissions and deployment secrets. If an attacker can make a pull request build satisfy the deploy workflow’s main branch condition, the deploy job checks out the triggering workflow commit, builds it into a Docker image, pushes it as latest, and triggers Dokploy deployment. This can allow attacker-controlled pull request code to become the deployed production site image without being merged. This issue has been patched in version 1.0.1.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
Source: CVE Program / CVE List V5
Vulnerability Type
从非可信控制范围包含功能例程
Source: CVE Program / CVE List V5
Vulnerability Title
Duck Site 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Duck Site是Duck Organization开源的一个网站内容管理工具。 Duck Site 1.0.1之前版本存在安全漏洞，该漏洞源于部署工作流条件检查不当，可能导致攻击者控制的拉取请求代码成为已部署的生产站点镜像。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| duck-organization | duck-site | < 1.0.1 | - |
|
II. Public POCs for CVE-2026-47174
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-47174
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-47174 (1)
Same Patch Batch · duck-organization · 2026-06-11 · 11 CVEs total
| CVE-2026-47188 | Quest Bot: Unban and unwarn reason fields still allow bot-powered mass mentions. | |
| CVE-2026-47189 | Quest Bot: AutoMod removal can delete rules from another guild by global rule ID | |
| CVE-2026-47163 | Quest Bot: Unprivileged users can create and remove AutoMod rules. | |
| CVE-2026-47175 | Quest Bot: Moderation reason fields allow bot-powered `@everyone` / `@here` pings | |
| CVE-2026-47177 | Quest Bot: Ticket transcripts can disclose private ticket contents to a lower-visibility c | |
| CVE-2026-47173 | Quest Bot: Ticket reason allows mass-mention injection | |
| CVE-2026-47176 | Quest Bot: Logging module can disclose private-channel message contents to a lower-visibil | |
| CVE-2026-47171 | Quest Bot: Reminder messages allow stored mass mentions through `@everyone` and `@here` | |
| CVE-2026-47172 | Quest Bot: Untrusted pull request code can be built and deployed by privileged `workflow_r | |
| CVE-2026-47169 | Quest Bot: Manage Server users can configure AutoRole to grant Administrator to controlled |
IV. Related Vulnerabilities
Same vendor: duck-organization
-
CVE-2026-49347
Quest Bot: Ticket creation has no per-user open-ticket limit -
CVE-2026-48485
Quest Bot: Stored warn reasons can still trigger bot-powered -
CVE-2026-47197
Quest Bot: Discord moderation role hierarchy bypass in ban, -
CVE-2026-47195
Quest Bot: Per-channel permission overwrite bypass in purge -
CVE-2026-47196
Quest Bot: Empty automod rule causes every guild message to
Same weakness: CWE-829
V. Comments for CVE-2026-47174
No comments yet