CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2026-01-13
Eigent CI Workflow Remote Code Execution via pull_request_target Misconfiguration (CVE-2026-22869)
[Affected Scope] The .github/workflows/ci.yml workflow configuration in the Eigent open-source repository
[Impact] Arbitrary code execution from fork pull requests, allowing attackers to steal credentials, push unauthorized code, or create malicious releases
[Mitigation] Apply the official patch commits or update the GitHub Actions workflow configuration to restrict untrusted code execution