CVE-2026-106459

Analyzed Analyzed - Analysis Complete

BaseFortify

Publication date: 2026-10-06

Last updated on: 2026-10-13

Assigner: GitHub, Inc.

Description

Backstage is an open framework for building developer portals. From 0.3.0 until 0.3.8, the @backstage/plugin-scaffolder-backend-module-sentry package is affected by improper input validation in sentry scaffolder actions. An authenticated internal user who can execute the affected actions may cause the backend to contact unintended destinations and disclose Sentry integration credentials. Subsequent impact depends on network reachability and the privileges granted to the configured token. This issue is fixed in version 0.3.8.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2026-10-06

Last Modified

2026-10-13

Generated

2026-10-19

AI Q&A

2026-10-07

EPSS Evaluated

2026-10-18

NVD

CVE-2026-106459

Affected Vendors & Products

Vendor	Product	Version / Range
linuxfoundation	backstage/plugin-scaffolder-backend-module-sentry	From 0.3.0 (inc) to 0.3.8 (exc)
linuxfoundation	backstage	From 1.47.0 (inc) to 1.54.8 (exc)

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-918	The web server receives a URL or similar request from an upstream component and retrieves the contents of this URL, but it does not sufficiently ensure that the request is being sent to the expected destination.
CWE-200	The product exposes sensitive information to an actor that is not explicitly authorized to have access to that information.

Attack-Flow Graph

Executive Summary

This vulnerability affects the @backstage/plugin-scaffolder-backend-module-sentry package versions 0.3.0 to 0.3.8. It involves improper input validation in sentry scaffolder actions, allowing authenticated internal users to cause the backend to contact unintended destinations and disclose Sentry integration credentials.

Detection Guidance

Check if the @backstage/plugin-scaffolder-backend-module-sentry package version is below 0.3.8. Review logs for unexpected outbound connections from the Backstage backend, especially to Sentry or other external services.

Impact Analysis

An attacker with access could cause the system to send data to unintended locations, potentially exposing sensitive Sentry integration credentials. The impact depends on network access and the permissions of the exposed token, which could lead to further unauthorized actions.

Compliance Impact

This vulnerability could lead to unauthorized disclosure of credentials and sensitive data, potentially violating GDPR (data protection) and HIPAA (health information privacy) requirements. Compliance impact depends on the nature of the exposed data and affected systems.

Mitigation Strategies

Upgrade the @backstage/plugin-scaffolder-backend-module-sentry package to version 0.3.8 or later. Review and restrict access to the affected actions for authenticated users.

Hi! I’m here to help you understand CVE-2026-106459. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70