GitHub Action Hijack: Protect Your Secrets from CVE-2025-30066!
Beware GitHub users! The popular tj-actions/changed-files GitHub Action (CVE-2025-30066) was compromised, potentially exposing secrets like access keys and tokens. Fortunately, this has been patched in v46.0.1. CISA urges users to secure their actions and stay vigilant.
Hot Take:
Looks like this GitHub Action took the “action” part a bit too seriously. Who knew a simple file check could turn into a treasure hunt for hackers? For a tool that’s supposed to tell you what changed, it sure did change a lot more than expected!
Key Points:
- A GitHub Action, tj-actions/changed-files, was compromised.
- This action helps identify changed files in commits or pull requests.
- The compromise could expose sensitive information like access keys and tokens.
- Patched in version v46.0.1, securing the action from further exploits.
- CISA has listed this in its Known Exploited Vulnerabilities Catalog.
Already a member? Log in here