Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.9

Eigent CI workflow lets attackers run code from fork PRs

CVE-2026-22869 · published 9 months ago
Summary

Eigent's automated build process is set up to run code from pull requests even when those requests come from external contributors. This allows a malicious contributor to execute any commands they want, potentially stealing passwords, posting unwanted messages, or adding unwanted code. Fix the workflow to avoid checking out untrusted code and limit its permissions, or use a safer trigger that only runs trusted code.

What to do
  • Update eigent eigent to version 0.0.78 or later.
Affected software
VendorProductAffected versions
eigent eigent < 0.0.78
cpe:2.3:a:eigent:eigent:*:*:*:*:*:*:*:*
Original advisory text
Eigent Allows Arbitrary Code Execution via pull_request_target CI Workflow
Eigent is a multi-agent Workforce. A critical security vulnerability in the CI workflow (.github/workflows/ci.yml) allows arbitrary code execution from fork pull requests with repository write permissions. The vulnerable workflow uses pull_request_target trigger combined with checkout of untrusted PR code. An attacker can exploit this to steal credentials, post comments, push code, or create releases.
References
Fix within
Internet-facing 3 days
Internal 60 days
  • Not known to be exploited
  • Can be exploited automatically (estimated)
  • Gives an attacker full control (estimated)
Severity
9.9 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-94Code Injection
Timeline
Published13 Jan 2026
Updated4 Nov 2026
First seen7 Mar 2026
Sources
CVE-2026-22869 · NVD
CVE-2026-22869 · OSV
GHSA-gvh4-93cq-5xxp · GHSA
Track software like this
Free during beta