CERT24CVE-2026-9106 — UI misrepresentation vulnerability in GitHub Enterprise Server allowed unauthorized organization runner managementLoading data…
CERT24Threat Observatory
Period

CVE-2026-9106 — UI misrepresentation vulnerability in GitHub Enterprise Server allowed unauthorized organization runner management

A UI misrepresentation vulnerability in GitHub Enterprise Server allowed an OAuth application to gain unintended access to an organization's runner management. The vulnerability affected versions before 3.22.

← Back to intelligence

CVE-2026-9106 — UI misrepresentation vulnerability in GitHub Enterprise Server allowed unauthorized organization runner management

A UI misrepresentation vulnerability in GitHub Enterprise Server allowed an OAuth application to gain unintended access to an organization's runner management. The vulnerability affected versions before 3.22.