CVE-2026-48722
1 advisory.
Maven/io.nextflow:nextflow CVE-2026-48722: medium 5.5
nextflow auth login command has incorrect default permissions
Action: Upgrade io.nextflow:nextflow to 25.10.6 (25.x) or 26.04.3 (26.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 25.09.2-edge | 25.10.6 | - |
| 26.00.0-edge | 26.04.3 | - |
Fixed versions
| 25.10.6 | 26.04.3 |
Sources
- osv: GHSA-92qf-fcph-v5wr
- https://github.com/nextflow-io/nextflow/security/advisories/GHSA-92qf-fcph-v5wr
- https://github.com/nextflow-io/nextflow
CVE-2026-48722 · published · modified · JSON