What is the CVSS score of CVE-2026-27941?

CVE-2026-27941 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Github are affected by CVE-2026-27941?

A critical vulnerability in OpenLIT's GitHub Actions workflows allows attackers to execute malicious code and steal sensitive secrets (API keys, database credentials, cloud service accounts) from the…. A patch is available.

Is there a public PoC exploit available for CVE-2026-27941?

Yes, a public proof-of-concept exploit is available for CVE-2026-27941. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-27941?

Within 24 hours: Immediately upgrade OpenLIT to version 1.37.1 or later and rotate all exposed secrets (API keys, database tokens, Google Cloud service account keys). Within 7 days: Audit GitHub Actions logs for suspicious activity and unauthorized secret access between vulnerability disclosure and patching. Within 30 days: Implement pull request approval requirements for external contributors and review GitHub Actions security settings to disable unnecessary secret exposure.

Github CVE-2026-27941

CRITICAL

Inclusion of Functionality from Untrusted Control Sphere (CWE-829)

2026-02-26 security-advisories@github.com

Github AI / ML Openlit Software Development Kit

9.9

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Mar 06, 2026 - 20:06 vuln.today

Public exploit code

Patch released

Mar 06, 2026 - 20:06 nvd

Patch available

CVE Published

Feb 26, 2026 - 02:16 nvd

CRITICAL 9.9

DescriptionGitHub Advisory

OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the pull_request_target event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged GITHUB_TOKEN and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix.

AnalysisAI

Supply chain attack vector in OpenLIT GitHub Actions workflows. The pull_request_target trigger with checkout enables malicious PRs to execute code in the context of the base repository. PoC and patch available.

Technical ContextAI

CWE-829 inclusion of functionality from untrusted control sphere. GitHub Actions workflows use pull_request_target with code checkout, allowing PR authors to execute arbitrary code with repository secrets.

RemediationAI

Update workflows to avoid pull_request_target with checkout, or use separate approval step.

More in Github

View all

CVE-2026-1699 CRITICAL Act Now POC

10.0 Jan 30

Supply chain vulnerability in Eclipse Theia GitHub Actions workflow. The preview.yml workflow uses pull_request_target w

CVE-2026-22869 CRITICAL Act Now POC

9.8 Jan 13

Eigent multi-agent workflow CI pipeline (ci.yml) uses pull_request_target with checkout of untrusted PR code, enabling a

CVE-2024-0200 CRITICAL Act Now POC

9.8 Jan 16

An unsafe reflection vulnerability was identified in GitHub Enterprise Server that could lead to reflection injection. R

CVE-2022-24724 CRITICAL Act Now POC

9.8 Mar 03

cmark-gfm is GitHub's extended version of the C reference implementation of CommonMark. Rated critical severity (CVSS 9.

CVE-2024-9487 CRITICAL Act Now POC

9.5 Oct 10

An improper verification of cryptographic signature vulnerability was identified in GitHub Enterprise Server that allowe

CVE-2026-28215 CRITICAL Act Now POC

9.1 Feb 26

Unauthenticated infrastructure overwrite in Hoppscotch API development ecosystem before 2026.2.0. Attackers can overwrit

CVE-2018-1000600 HIGH This Week POC

8.8 Jun 26

A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCrede

CVE-2026-30920 HIGH This Week POC

8.6 Mar 10

OneUptime versions prior to 10.0.19 allow unauthenticated attackers to hijack GitHub App integrations across projects by

CVE-2026-25221 HIGH This Week POC

8.1 Feb 02

PolarLearn versions 0-PRERELEASE-15 and earlier lack proper state parameter validation in OAuth 2.0 authentication, enab

CVE-2026-23644 HIGH This Week POC

7.5 Jan 18

Path traversal in esm.sh CDN prior to version 0.0.0-20260116051925-c62ab83c589e allows unauthenticated remote attackers

CVE-2024-42471 HIGH This Week POC

7.5 Sep 02

actions/artifact is the GitHub ToolKit for developing GitHub Actions. Rated high severity (CVSS 7.5), this vulnerability

CVE-2023-37463 HIGH This Week POC

7.5 Jul 13

cmark-gfm is an extended version of the C reference implementation of CommonMark, a rationalized version of Markdown syn

Same weakness CWE-829 – Inclusion of Functionality from Untrusted Control Sphere

View all

CVE-2025-32463 CRITICAL POC

9.3

CVE-2026-0770 CRITICAL POC

9.8

CVE-2025-27607 HIGH POC

8.8

CVE-2026-1699 CRITICAL POC

10.0

CVE-2020-8128 CRITICAL POC

9.8

CVE-2019-13589 CRITICAL POC

9.8

CVE-2018-15486 CRITICAL POC

9.1

CVE-2021-30507 HIGH POC

8.8

CVE-2026-27941 vulnerability details – vuln.today

Back

Github CVE-2026-27941

Severity by source

CVSS VectorGitHub Advisory

Lifecycle Timeline

DescriptionGitHub Advisory

AnalysisAI

Technical ContextAI

RemediationAI

More in Github

Same weakness CWE-829 – Inclusion of Functionality from Untrusted Control Sphere

Share

External POC / Exploit Code