A vulnerability, which was classified as critical, was found in nektos act. This affects the function
set-env/add-path. Executing a manipulation can lead to injection.
This vulnerability is handled as CVE-2026-34041. The attack can be executed remotely. There is not any exploit available.
You should upgrade the affected component.
