A vulnerability has been found in step-security harden-runner up to 2.15 and classified as problematic. This issue affects some unknown processing of the component HTTPS Endpoint. Performing a manipulation results in protection mechanism failure.
This vulnerability is known as CVE-2026-32947. Remote exploitation of the attack is possible. No exploit is available.
The affected component should be upgraded.
