CVE-2026-124039
LOW
NVD
CVSS Score
3.3
Severity
LOW
Published
Nov 06, 2026
Vendor
unknown
Description
Gitleaks through 8.30.1 contains an incorrect permission assignment vulnerability that allows local users to read scan reports because cmd/root.go creates the --report-path file with os.Create and default permissions. Unless --redact is passed, other local users on shared hosts or CI runners can read plaintext secrets and matching lines to obtain discovered credentials.