What is the CVSS score of CVE-2026-27941?

CVE-2026-27941 has a CVSS 3.1 base score of 9.9 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 0.1%.

Which versions of Github are affected by CVE-2026-27941?

A critical vulnerability in OpenLIT's GitHub Actions workflows allows attackers to execute malicious code and steal sensitive secrets (API keys, database credentials, cloud service accounts) from the…. A patch is available.

Is there a public PoC exploit available for CVE-2026-27941?

Yes, a public proof-of-concept exploit is available for CVE-2026-27941. Prioritise patching immediately. EPSS: 0.1%.

How to fix or mitigate CVE-2026-27941?

Within 24 hours: Immediately upgrade OpenLIT to version 1.37.1 or later and rotate all exposed secrets (API keys, database tokens, Google Cloud service account keys). Within 7 days: Audit GitHub Actions logs for suspicious activity and unauthorized secret access between vulnerability disclosure and patching. Within 30 days: Implement pull request approval requirements for external contributors and review GitHub Actions security settings to disable unnecessary secret exposure.

Github CVE-2026-27941

CRITICAL

Inclusion of Functionality from Untrusted Control Sphere (CWE-829)

2026-02-26 security-advisories@github.com

Github AI / ML Openlit Software Development Kit

9.9

CVSS 3.1 · GitHub Advisory

Severity by source

GitHub Advisory PRIMARY

9.9 CRITICAL

AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from GitHub Advisory · only source for this CVE.

CVSS VectorGitHub Advisory

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

Low

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 12, 2026 - 21:55 vuln.today

PoC Detected

Mar 06, 2026 - 20:06 vuln.today

Public exploit code

Patch released

Mar 06, 2026 - 20:06 nvd

Patch available

CVE Published

Feb 26, 2026 - 02:16 nvd

CRITICAL 9.9

DescriptionGitHub Advisory

OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the pull_request_target event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged GITHUB_TOKEN and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix.

AnalysisAI

Supply chain attack vector in OpenLIT GitHub Actions workflows. The pull_request_target trigger with checkout enables malicious PRs to execute code in the context of the base repository. PoC and patch available.

Technical ContextAI

CWE-829 inclusion of functionality from untrusted control sphere. GitHub Actions workflows use pull_request_target with code checkout, allowing PR authors to execute arbitrary code with repository secrets.

RemediationAI

Update workflows to avoid pull_request_target with checkout, or use separate approval step.

More in Github

View all

CVE-2026-1699 CRITICAL Act Now POC

10.0 Jan 30

Supply chain vulnerability in Eclipse Theia GitHub Actions workflow. The preview.yml workflow uses pull_request_target w

CVE-2026-22869 CRITICAL Act Now POC

9.8 Jan 13

Eigent multi-agent workflow CI pipeline (ci.yml) uses pull_request_target with checkout of untrusted PR code, enabling a

CVE-2026-28215 CRITICAL Act Now POC

9.1 Feb 26

Unauthenticated infrastructure overwrite in Hoppscotch API development ecosystem before 2026.2.0. Attackers can overwrit

CVE-2018-1000600 HIGH This Week POC

8.8 Jun 26

A exposure of sensitive information vulnerability exists in Jenkins GitHub Plugin 1.29.1 and earlier in GitHubTokenCrede

CVE-2026-30920 HIGH This Week POC

8.6 Mar 10

OneUptime versions prior to 10.0.19 allow unauthenticated attackers to hijack GitHub App integrations across projects by

CVE-2026-25221 HIGH This Week POC

8.1 Feb 02

PolarLearn versions 0-PRERELEASE-15 and earlier lack proper state parameter validation in OAuth 2.0 authentication, enab

CVE-2026-23644 HIGH This Week POC

7.5 Jan 18

Path traversal in esm.sh CDN prior to version 0.0.0-20260116051925-c62ab83c589e allows unauthenticated remote attackers

CVE-2025-68619 HIGH This Week POC

7.2 Jan 01

Signal K Server is a server application that runs on a central hub in a boat. Versions prior to 2.19.0 of the appstore i

CVE-2026-27943 MEDIUM This Month POC

6.5 Feb 26

Authenticated users in OpenEMR through version 8.0.0 can access and modify eye exam records belonging to other patients

CVE-2026-23889 MEDIUM This Month POC

6.5 Jan 26

Path traversal in pnpm's tarball extraction on Windows allows attackers to write files outside the intended package dire

CVE-2026-27612 MEDIUM This Month POC

6.1 Feb 25

Reflected XSS in Repostat's RepoCard React component prior to version 1.0.1 allows attackers to execute arbitrary JavaSc

CVE-2025-49013 CRITICAL Act Now

9.9 Jun 09

A security vulnerability in WilderForge (CVSS 9.9). Critical severity with potential for significant impact on affected

Same weakness CWE-829 – Inclusion of Functionality from Untrusted Control Sphere

View all

CVE-2025-32463 CRITICAL POC

9.3

CVE-2026-0770 CRITICAL POC

9.8

CVE-2025-27607 HIGH POC

8.8

CVE-2026-1699 CRITICAL POC

10.0

CVE-2020-8128 CRITICAL POC

9.8

CVE-2019-13589 CRITICAL POC

9.8

CVE-2018-15486 CRITICAL POC

9.1

CVE-2021-30507 HIGH POC

8.8

CVE-2026-27941 vulnerability details – vuln.today

Back

Github CVE-2026-27941

Severity by source

CVSS VectorGitHub Advisory

Lifecycle Timeline

DescriptionGitHub Advisory

AnalysisAI

Technical ContextAI

RemediationAI

More in Github

Same weakness CWE-829 – Inclusion of Functionality from Untrusted Control Sphere

Share

External POC / Exploit Code