Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
ciguard is a static security auditor for CI/CD pipelines. From 0.8.0 to 0.8.1 , the discover_pipeline_files() function in src/ciguard/discovery.py walks a directory tree following symlinks, with cycle protection via tracking visited resolved paths. An attacker who can plant a symlink in a directory the user (or AI agent) scans can cause discovery to walk into the symlink target and return paths to pipeline-shaped files outside the requested root. This vulnerability is fixed in 0.8.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
CVE-2026-44220 ciguard is a static security auditor for CI/CD pipelines. From 0.8.0 to 0.8.1 , the discover_pipeline_files() function in src/ciguard/discovery.py walks a directory t… https://www.cve.org/CVERecord?id=CVE-2026-44220
Post summary
The post references a CVE in ciguard's pipeline file discovery module, but lacks details on exploitation, patches, or a PoC.
🟠 ciguard (CI/CD pipeline auditor), Improper Link Resolution (CWE-59), #CVE-2026-44220 (Medium) https://dailycve.com/ciguard-ci-cd-pipeline-auditor-improper-link-resolution-cwe-59-cve-2026-44220-medium/
Post summary
The post references CVE-2026-44220 as a Medium severity improper link resolution vulnerability in the ciguard CI/CD pipeline auditor, but provides no details on exploits, patches, or active misuse.