算力向端侧下沉，芯片巨头竞速AI落地

yun2025

算力向端侧下沉，芯片巨头竞速AI落地

Junie GitHub Action：代码仓库分支更新可能取得工作流凭据

11月7日公开的漏洞记录CVE-2026-123852涉及Junie GitHub Action。Junie的GitHub自动化操作会在仓库工作流中运行，并可使用工作流获准使用的凭据。特定旧版在处理派生仓库更新时，可能使外部提交的代码带着这些权限执行。公告把1.8.0之前的版本列入范围，风险涉及自动化执行环境的凭据边界。版本清单标出的受影响范围包括1.8.0之前的版本。

这条记录给出的CVSS 3.1基础评分为7.4分，分级为高危。按照评分列出的条件，利用者可通过网络接触相关功能，不以事先取得系统权限为必要条件，并且无需另一名用户进行额外交互。数据保密性、内容完整性和服务可用性三项的影响等级分别为高、高、无。评分把利用复杂度列为较高，所反映的是触发这一缺陷需要满足的技术条件。

https://v.youku.com/v_show/id_XNjU4ODU0ODM3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODg1NjM5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODg1NDk0MA==.html
https://v.youku.com/v_show/id_XNjU4ODU0NTI0MA==.html
https://v.youku.com/v_show/id_XNjU4ODU0MjIyOA==.html
https://v.youku.com/v_show/id_XNjU4ODU0OTc2NA==.html
https://v.youku.com/v_show/id_XNjU3ODg1NzY1Mg==.html
https://v.youku.com/v_show/id_XNjU4ODU0MzgyMA==.html
https://v.youku.com/v_show/id_XNjU4ODU0MzgxNg==.html
https://v.youku.com/v_show/id_XNjU3ODg1MzI3Mg==.html
https://v.youku.com/v_show/id_XNjU3ODg1MTk5Mg==.html
https://v.youku.com/v_show/id_XNjU4ODU0Mzc0NA==.html
https://v.youku.com/v_show/id_XNjU4ODU0MzcyOA==.html
https://v.youku.com/v_show/id_XNjU3ODg1MzE3Ng==.html
https://v.youku.com/v_show/id_XNjU4ODU0OTYxMg==.html
https://v.youku.com/v_show/id_XNjU4ODU0NjQ3Mg==.html
https://v.youku.com/v_show/id_XNjU4ODU0MDY5Ng==.html
https://v.youku.com/v_show/id_XNjU3ODg1MzAwOA==.html
https://v.youku.com/v_show/id_XNjU3ODg1Mjk4OA==.html
https://v.youku.com/v_show/id_XNjU3ODg1Mjk4NA==.html
https://v.youku.com/v_show/id_XNjU3ODg1Mjk4MA==.html
https://v.youku.com/v_show/id_XNjU4ODU0MzUwOA==.html
https://v.youku.com/v_show/id_XNjU4ODU0NDgwOA==.html
https://v.youku.com/v_show/id_XNjU3ODg1MTcxMg==.html
https://v.youku.com/v_show/id_XNjU4ODUzNTk0MA==.html
https://v.youku.com/v_show/id_XNjU4ODUzNzU2NA==.html
https://v.youku.com/v_show/id_XNjU4ODU0MTg4MA==.html
https://v.youku.com/v_show/id_XNjU4ODU0MTc5Mg==.html
https://v.youku.com/v_show/id_XNjU4ODUzOTA3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODg1MDE1Ng==.html
https://v.youku.com/v_show/id_XNjU4ODU0MzI2OA==.html
https://v.youku.com/v_show/id_XNjU3ODg0NTU3Ng==.html
https://v.youku.com/v_show/id_XNjU3ODg1MTM2MA==.html
https://v.youku.com/v_show/id_XNjU3ODg1MDAxNg==.html
https://v.youku.com/v_show/id_XNjU3ODg0NTQ4NA==.html
https://v.youku.com/v_show/id_XNjU3ODg0OTg3Ng==.html
https://v.youku.com/v_show/id_XNjU4ODU0MDAwNA==.html
https://v.youku.com/v_show/id_XNjU3ODg0OTgyMA==.html
https://v.youku.com/v_show/id_XNjU4ODUzODY2OA==.html
https://v.youku.com/v_show/id_XNjU3ODg0NTI0MA==.html
https://v.youku.com/v_show/id_XNjU4ODUzODY0OA==.html
https://v.youku.com/v_show/id_XNjU4ODUzNzAzNg==.html
https://v.youku.com/v_show/id_XNjU4ODUzNzAwOA==.html
https://v.youku.com/v_show/id_XNjU4ODUzNDE0NA==.html
https://v.youku.com/v_show/id_XNjU3ODg0Mzc0MA==.html
https://v.youku.com/v_show/id_XNjU3ODg0NTA1Ng==.html
https://v.youku.com/v_show/id_XNjU3ODg0MzcxNg==.html
https://v.youku.com/v_show/id_XNjU3ODg0MzcxMg==.html
https://v.youku.com/v_show/id_XNjU3ODg0MzYyOA==.html
https://v.youku.com/v_show/id_XNjU4ODUzMjY0OA==.html