{"action":"Upgrade io.nextflow:nextflow to 25.10.6 (25.x) or 26.04.3 (26.x) or later.","affected":[{"fixed":"25.10.6","introduced":"25.09.2-edge"},{"fixed":"26.04.3","introduced":"26.00.0-edge"}],"component":"io.nextflow:nextflow","cve_ids":["CVE-2026-48722"],"ecosystem":"Maven","epss":0.00142,"exploited":false,"fixed_versions":["25.10.6","26.04.3"],"ghsa_id":"GHSA-92qf-fcph-v5wr","id":"tcs_01M5N8NVM55RZPKGZRH54KZDMM","modified_at":"2026-06-25T22:11:29.527989Z","published_at":"2026-06-25T21:45:55Z","references":["https://osv.dev/vulnerability/GHSA-92qf-fcph-v5wr","https://github.com/nextflow-io/nextflow/security/advisories/GHSA-92qf-fcph-v5wr","https://github.com/nextflow-io/nextflow"],"severity":{"label":"medium","score":5.5},"sources":[{"source":"osv","source_id":"GHSA-92qf-fcph-v5wr","url":"https://osv.dev/vulnerability/GHSA-92qf-fcph-v5wr"}],"summary":"nextflow auth login command has incorrect default permissions"}