4.7

CVSS Score

3.1

-

CVSS Score

Basic Information

Concerned about an active attack path?

Talk to our security experts and see Miggo in action.

Miggo Vulnerability Database

→

CVE-2025-10281

CVE-2025-10281: BBOT's git_clone.py can expose users' GitHub API keys to an attacker-controlled webserver

Summary

Due to unsafe URL handling, bbot's git_clone.py can be made to leak a user's github.com API key to an attacker-controlled webserver.

Impact

A user who has placed their github.com API key in the configuration for any of the following modules:

github_codesearch
github_workflows
gitlab
git_clone
github_usersearch
github_org

may leak it to an untrustworthy server.

(GitHub Advisory)

Miggo Vulnerability Database

→

CVE-2025-10281

CVE-2025-10281:

4.7

CVSS Score

3.1

-

CVSS Score

Basic Information

Is this CVE running in your environment?

Easily map the attack path and prioritize which CVEs are a threat to your organization

Validate Exposure

Technical Details

Package Name	Ecosystem	Vulnerable Versions	First Patched Version
bbot	pip	< 2.7.0	2.7.0

Technical Details

Vulnerability Intelligence
Miggo AI

Root Cause Analysis

The vulnerability allows an attacker to craft a malicious git repository that, when cloned and operated on by bbot, can leak the user's GitHub API keys. This is achieved by placing malicious commands in the repository's .git/config file, which are then executed by subsequent git commands.

The analysis of the patch 0ede97fa887de33fcfd1378b4213a09c21dc6140 reveals the vulnerable areas and the mitigation strategy.

A new, more robust sanitization function sanitize_git_repo was introduced in bbot/core/helpers/git.py. Instead of trying to parse and clean the git config, it simply renames the .git/config, .git/index, and .git/hooks files, effectively neutralizing any malicious content within them.
In bbot/modules/git_clone.py, the clone_git_repository function was identified as a primary entry point for the vulnerability. It clones a repository but previously performed no sanitization. The patch rectifies this by adding a call to the new sanitize_git_repo function immediately after the clone operation. This indicates that clone_git_repository was a vulnerable function.
In bbot/modules/gitdumper.py, a function named sanitize_config was removed. This function represented an earlier, insufficient attempt to mitigate the vulnerability by using a regex to comment out dangerous commands. Its removal and replacement show it was part of the vulnerable logic.
The git_checkout function in gitdumper.py was modified to call the new sanitize_git_repo function. This is because git checkout is a command that can trigger the malicious configuration. By adding the sanitization step, the patch secures this operation.
The handle_event function in gitdumper.py previously called the inadequate sanitize_config. The removal of this call further confirms that the gitdumper module had a vulnerable workflow.

Therefore, the functions GitClone.clone_git_repository, GitDumper.git_checkout, and GitDumper.handle_event would be active during exploitation. The removed GitDumper.sanitize_config function is also a key indicator of the vulnerability's nature and the flawed attempts to fix it.

Vulnerable functions

Only Mi**o us*rs **n s** t*is s**tion

Vulnerability Intelligence
Miggo AI

Unlock WAF rules for this CVE

Generate vendor-ready rules for the observed attack patterns, plus reasoning and safe deployment guidance

Get WAF rules

WAF Protection Rules

WAF Rule

W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.W** rul*s *v*il**l* *or Mi**o *ustom*rs only.

Reasoning

*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.*v*il**l* *or Mi**o *ustom*rs only.