What is the CVSS score of CVE-2026-27941?

CVE-2026-27941 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Is there a public PoC exploit available for CVE-2026-27941?

Yes, a public proof-of-concept exploit is available for CVE-2026-27941. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-27941?

Within 24 hours: Immediately upgrade OpenLIT to version 1.37.1 or later and rotate all exposed secrets (API keys, database tokens, Google Cloud service account keys). Within 7 days: Audit GitHub Actions logs for suspicious activity and unauthorized secret access between vulnerability disclosure and patching. Within 30 days: Implement pull request approval requirements for external contributors and review GitHub Actions security settings to disable unnecessary secret exposure.

Github CVE-2026-27941

CRITICAL

Inclusion of Functionality from Untrusted Control Sphere (CWE-829)

2026-02-26 security-advisories@github.com

Github AI / ML Openlit Software Development Kit

9.9

CVSS 3.1 · GitHub Advisory

View

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata – not a confirmed exploit chain

Access

Fork OpenLIT repository
Delivery

Submit malicious pull request
Exploit

GitHub Actions workflow executes untrusted code
Execution

Access write-privileged GITHUB_TOKEN and secrets
Impact

Exfiltrate credentials and compromise base repository

Vulnerability Assessment

Weakness	CWE CWE-829 OWASP Top 10:2025 A08:2025 - Software or Data Integrity Failures ASVS 5.0 V15 - Secure Coding and Architecture Trusted source inclusion only
Exploitation Conditions	Attacker must have GitHub account to fork repository and submit pull request. Target repository must use vulnerable `pull_request_target` event in GitHub Actions workflows (versions prior to 1.37.1). Workflows must checkout and execute code from forked pull requests without sanitization.
Impact	CVSS 9.9. Supply chain attack — any GitHub user can submit a PR and potentially access repository secrets.
Exploit ScenarioDerived	Attacker submits malicious PR to OpenLIT, the CI workflow runs with repository context, leaking secrets or pushing malicious code.

Act Now Prioritize within 24-48h. Why: CRITICAL severity + public POC available.

Patch available 0.1% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv1 – Mar 12, 2026

Supply chain attack vector in OpenLIT GitHub Actions workflows. The pull_request_target trigger with checkout enables malicious PRs to execute code in the context of the base repository. PoC and patch available.

Earlier versions of this analysis (1)

v1 Mar 12, 2026 - 21:55 CVSS 9.9

GitHub Actions supply chain vulnerability in OpenLIT.

RemediationAI

Update workflows to avoid pull_request_target with checkout, or use separate approval step.

Affected Packages

pypi openlit fix: 1.37.1

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 1 package in pypi

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Technical ContextAI · show details

CWE-829 inclusion of functionality from untrusted control sphere. GitHub Actions workflows use pull_request_target with code checkout, allowing PR authors to execute arbitrary code with repository secrets.

Know when Github gets its next vulnerability

Watch products and get an email when something new is published
Check this CVE against your own stack and servers
Exploit and PoC references, threat intelligence from 22 sources

Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

GitHub Advisory PRIMARY 9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

PoC Detected

Mar 06, 2026 - 20:06 vuln.today

Public exploit code

Patch released

Mar 06, 2026 - 20:06 nvd

Patch available

CVE Published

Feb 26, 2026 - 02:16 nvd

CRITICAL 9.9

DescriptionGitHub Advisory

OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the pull_request_target event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged GITHUB_TOKEN and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix.

Executive ViewAI

Why It Matters

A critical vulnerability in OpenLIT's GitHub Actions workflows allows attackers to execute malicious code and steal sensitive secrets (API keys, database credentials, cloud service accounts) from the organization's CI/CD pipeline through forked pull requests. This affects any organization running OpenLIT in their development environment and could lead to unauthorized access to cloud infrastructure, databases, and third-party services.

Business Impact: Severe

Compensating Controls

Apply vendor patch.

Threat Intelligence Overview

EPSS Score

0.1%

Top 84% exploitable

Exploit

POC

Public exploit code exists

Data Quality

4 sources

Confidence: Medium

NVD

CVE.org

EPSS

GitHub

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue

Severity CRITICAL

CISA KEV No

Public POC Yes

EPSS 0.1%

Patch available Yes

Active threat No

Deciding rule

CRITICAL severity + public POC available

What every action level means

Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.

Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.

This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.

This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.

Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived

Out-of-Cycle

Exploitation· derived

Poc

System Exposure· derived

Open

Automatable· derived

Human Impact

Very High

Priority Score

Low Medium High Critical

KEV: 0

EPSS: 0

CVSS: +50

PoC: +20

Weaponized: 0

Threat intel: 0

Gov advisory: 0

Affected Products (CPE)GitHub Advisory

cpe:2.3:a:openlit:openlit_software_development_kit:*:*:*:*:*:python:*:*

More in Github

View all

CVE-2026-1699 CRITICAL Act Now POC

10.0 Jan 30

Supply chain vulnerability in Eclipse Theia GitHub Actions workflow. The preview.yml workflow uses pull_request_target w

CVE-2026-22869 CRITICAL Act Now POC

9.8 Jan 13

Eigent multi-agent workflow CI pipeline (ci.yml) uses pull_request_target with checkout of untrusted PR code, enabling a

CVE-2024-0200 CRITICAL Act Now POC

9.8 Jan 16

An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. R

CVE-2022-24724 CRITICAL Act Now POC

9.8 Mar 03

cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark. Rated critical severity (CVSS 9.

CVE-2024-9487 CRITICAL Act Now POC

9.5 Oct 10

An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowe

CVE-2026-28215 CRITICAL Act Now POC

9.1 Feb 26

Unauthenticated infrastructure overwrite in Hoppscotch API development ecosystem before 2026.2.0. Attackers can overwrit

CVE-2018-1000600 HIGH This Week POC

8.8 Jun 26

A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCrede

CVE-2026-30920 HIGH This Week POC

8.6 Mar 10

OneUptime versions prior to 10.0.19 allow unauthenticated attackers to hijack GitHub App integrations across projects by

CVE-2026-25221 HIGH This Week POC

8.1 Feb 02

PolarLearn versions 0-PRERELEASE-15 and earlier lack proper state parameter validation in OAuth 2.0 authentication, enab

CVE-2026-23644 HIGH This Week POC

7.5 Jan 18

Path traversal in esm.sh CDN prior to version 0.0.0-20260116051925-c62ab83c589e allows unauthenticated remote attackers

CVE-2024-42471 HIGH This Week POC

7.5 Sep 02

actions/artifact is the GitHub ToolKit for developing GitHub Actions. Rated high severity (CVSS 7.5), this vulnerability

CVE-2023-37463 HIGH This Week POC

7.5 Jul 13

cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syn

Same weakness CWE-829 – Inclusion of Functionality from Untrusted Control Sphere

View all

CVE-2025-32463 CRITICAL POC

9.3

CVE-2026-0770 CRITICAL POC

9.8

CVE-2026-111357 HIGH POC

7.0

CVE-2025-27607 HIGH POC

8.8

CVE-2020-8128 CRITICAL POC

9.8

CVE-2019-13589 CRITICAL POC

9.8

CVE-2025-65964 CRITICAL POC

9.4

References

Advisories & patches

PATCH https://github.com/openlit/openlit/commit/4a62039a1659d6cbb8913172693f587b5fc2546c

Search Externally

GitHub PoC

Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC

Back