A systemic class of exploitable CI/CD vulnerabilities has been discovered in the open-source software supply chain, allowing unauthenticated attackers to hijack developer workflows and gain full control over affected repositories. The flaw, dubbed "Cordyceps," impacts code repositories at thousands of organizations, including Microsoft, Google, Apache, Cloudflare, and the Python Software Foundation.

What Happened

Novee, a cybersecurity firm, identified the vulnerabilities in GitHub Actions YAML files. These files are used to automate workflows for building, testing, and releasing software. However, they are often treated as "configuration" rather than security-critical code, making them vulnerable to exploitation.

The researchers found that command injection, broken authentication logic, artifact poisoning chains, and privilege escalation were all present in GitHub Actions workflows. These vulnerabilities allow attackers to forge approvals, push code, and exfiltrate credentials without needing special privileges or organizational membership.

According to Novee, a single pull request or comment can trigger the chain of events leading to full control over a repository's build pipeline. This is particularly concerning because these workflows run shell commands, authenticate to cloud providers, hold signing keys, and publish releases.

Background and Context

The discovery of Cordyceps highlights the importance of secure coding practices in software development. Agentic coding, where automated tools generate code, can lead to insecure patterns being reproduced across millions of repositories. This is exactly what happened with Cordyceps, where the same pattern was identified in GitHub Actions workflows.

The researchers scanned roughly 30,000 high-impact repositories and validated hundreds of fully exploitable attack chains. They also confirmed fixes at dozens of organizations, including Microsoft, Google, Apache, Cloudflare, and the Python Software Foundation. However, there are millions of repositories that may be affected by this same pattern.

Novee's research team discovered that the underlying pattern can be reproduced at scale and potentially affects millions of repositories. This is a critical concern for organizations relying on open-source software, as a single compromised repository can ripple outward into banks, cloud environments, AI labs, and end-user devices.

Why It Matters to the Industry

The Cordyceps vulnerability has significant implications for the adult industry. Many platforms rely on open-source software, including streaming and webcam infrastructure, servers, and platforms. A single compromised repository can lead to supply chain compromise, which can have far-reaching consequences.

For example, if a malicious package is published on NPM, PyPI, Crates.io, Docker/GHCR, or other package registries, it can be pulled into downstream consumers' projects, potentially leading to code injection, data breaches, or even malware distribution. This highlights the importance of secure coding practices and regular security audits in the adult industry.

Moreover, the Cordyceps vulnerability demonstrates how easily attackers can gain control over software supply chains. This is particularly concerning for organizations that rely on third-party dependencies, as a single compromised repository can have far-reaching consequences.

What Comes Next

The discovery of Cordyceps has sparked widespread concern in the cybersecurity community. Organizations are urged to review their CI/CD workflows and ensure they are not vulnerable to exploitation. This includes implementing secure coding practices, regular security audits, and monitoring for suspicious activity.

Novee's research team is working closely with affected organizations to implement fixes and prevent future attacks. They also emphasize the importance of treating workflows as "code" rather than "configuration," which can help prevent similar vulnerabilities in the future.

Key Facts

  • The Cordyceps vulnerability impacts code repositories at thousands of organizations, including Microsoft, Google, Apache, Cloudflare, and the Python Software Foundation.
  • The flaw allows unauthenticated attackers to hijack developer workflows and gain full control over affected repositories.
  • Command injection, broken authentication logic, artifact poisoning chains, and privilege escalation are all present in GitHub Actions workflows.
  • A single pull request or comment can trigger the chain of events leading to full control over a repository's build pipeline.
  • Novee scanned roughly 30,000 high-impact repositories and validated hundreds of fully exploitable attack chains.