CVE-2026-88881— Renovate 44.11.3 之前凭据泄露漏洞
一分钟漏洞结论
影响对象
renovatebot renovate
利用判断
尚无明确在野利用证据，仍需结合暴露面评估
建议动作
优先检查厂商安全公告和参考链接中的修复版本；无法立即升级时，限制受影响服务暴露并加强监测。
Renovate 是一款依赖项更新工具。当它与 GitHub.com、GitHub Enterprise Cloud 或 GitHub Enterprise Server 进行交互时，会遵循 GitHub 服务器在 HTTP 响应头中提供的分页链接，并将为该主机配置的凭证发送到指定为“下一页”的 URL。由于分页 URL 未针对最初连接的主机进行验证，一个恶意或被入侵的 GitHub 服务器可以返回一个指向攻击者控制主机的 头，从而导致 Renovate 向该主机泄露其凭证。利用此漏洞的前提是，Renovate 交
获取后续新漏洞提醒
登录后订阅
一、 漏洞 CVE-2026-88881 基础信息
漏洞信息
对漏洞内容有疑问？看看神龙的深度分析是否有帮助！
查看神龙十问 ↗
尽管我们使用了先进的大模型技术，但其输出仍可能包含不准确或过时的信息。神龙努力确保数据的准确性，但请您根据实际情况进行核实和判断。
Vulnerability Title
Renovate before 44.11.3 Credential Exfiltration via Link Header
来源: CVE Program / CVE List V5
Vulnerability Description
Renovate, a dependency update tool, follows pagination links supplied by the GitHub server in the HTTP `Link` header when interacting with GitHub.com, GitHub Enterprise Cloud, or GitHub Enterprise Server, and sends the credentials configured for that host to the URL given as the 'next' page. Because the pagination URL is not validated against the host originally contacted, a malicious or compromised GitHub server can return a `Link` header pointing to an attacker-controlled host and cause Renovate to disclose those credentials to it. Exploitation requires that the GitHub server Renovate talks to (as the repository host or as a datasource such as github-releases, github-tags, or git-refs) is already malicious or compromised. The issue is fixed in renovate 44.11.3 (npm and renovate/renovate container images), Mend Renovate CE/EE images and the mend-renovate-ce helm chart 15.4.0, and the mend-renovate-enterprise-edition helm chart 10.4.0. There is no workaround; the pre-existing RENOVATE_X_REBASE_PAGINATION_LINKS option disables the new host check and should only be used with servers that intentionally use different pagination hosts.
来源: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
来源: CVE Program / CVE List V5
Vulnerability Type
指向未可信站点的URL重定向(开放重定向)
来源: CVE Program / CVE List V5
受影响产品
| 厂商 | 产品 | 影响版本 | CPE | 订阅 |
|---|---|---|---|---|
| renovatebot | renovate | 0 ~ 44.11.3 | - |
|
| renovatebot | renovate | 0 ~ 44.11.3 | - |
|
| renovatebot | renovate | 0 ~ 44.11.3 | - |
|
| renovatebot | renovate | 0 ~ 44.11.3 | - |
|
| renovatebot | renovate | 0 ~ 15.4.0 | - |
|
| renovatebot | renovate | 0 ~ 15.4.0 | - |
|
| renovatebot | renovate | 0 ~ 15.4.0 | - |
|
| renovatebot | renovate | 0 ~ 15.4.0 | - |
|
| renovatebot | renovate | 0 ~ 15.4.0 | - |
|
| renovatebot | renovate | 0 ~ 15.4.0 | - |
|
| renovatebot | renovate | 0 ~ 15.4.0 | - |
|
| renovatebot | renovate | 0 ~ 15.4.0 | - |
|
| renovatebot | renovate | 0 ~ 15.4.0 | - |
|
| renovatebot | renovate | 0 ~ 15.4.0 | - |
|
| renovatebot | renovate | 0 ~ 15.4.0 | - |
|
| renovatebot | renovate | 0 ~ 10.4.0 | - |
|
| renovatebot | renovate | 0 ~ 10.4.0 | - |
|
二、漏洞 CVE-2026-88881 的公开POC
| # | POC 描述 | 源链接 | 神龙链接 |
|---|
AI 生成 POC
高级
未找到公开 POC。
登录以生成 AI POC三、漏洞 CVE-2026-88881 的情报信息
请登录查看更多情报信息。
CVE-2026-88881 其他参考 (2)
同批安全公告 · renovatebot · 2026-09-10 · 共 10 条
| CVE-2026-88882 | 8.6 HIGH | Renovate 44.11.2 凭据泄露漏洞 |
| CVE-2026-88880 | 8.6 HIGH | Renovate 44.11.3前 凭据泄露漏洞 |
| CVE-2026-88887 | 8.6 HIGH | Renovate 44.11.1 凭据泄露漏洞 |
| CVE-2026-88886 | 7.8 HIGH | Renovate 44.14.7 前 Gradle-wrapper 命令注入漏洞 |
| CVE-2026-88889 | 7.8 HIGH | Renovate 44.14.7 之前命令注入漏洞 |
| CVE-2026-88883 | 7.7 HIGH | Renovate 44.14.4 之前 TLS 密钥泄露 |
| CVE-2026-88885 | 7.0 HIGH | Renovate 44.14.7之前版本 命令注入漏洞 |
| CVE-2026-88888 | 7.0 HIGH | Renovate 44.14.7之前 命令执行漏洞 |
| CVE-2026-88884 | 5.8 MEDIUM | Renovate 44.3.1 之前 认证绕过漏洞 |
IV. Related Vulnerabilities
V. Comments for CVE-2026-88881
暂无评论