identrail vulnerabilities

Products

• github.com/identrail/identrail 1

Latest identrail CVEs

Newest publication first

1. CVE-2026-59185 identrail: Cross-tenant GitHub installation binding without ownership verification

   Published 2026-10-28

   High·CVSS 8.5 EPSS 0.32%

   identrail is a machine identity security platform for AWS, GitHub/OIDC, and Kubernetes. Prior to 1.0.2, the default-on POST /v1/workspaces/:workspace_id/projects/:project_id/github/connect/complete endpoint in internal/api/router.go accepts installation_id from the request body o...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.