Eigent
Monthly
Eigent multi-agent workflow CI pipeline (ci.yml) uses pull_request_target with checkout of untrusted PR code, enabling arbitrary code execution with repository write permissions from fork PRs. PoC available, patch available.
Code injection in Eigent version 0.0.60 allows unauthenticated remote attackers to execute arbitrary code on the victim's machine or server, but the attack requires the victim to perform a single interaction ('1-click') with attacker-supplied content. The vulnerability is patched in version 0.0.61. No public exploit code or active exploitation has been identified at time of analysis; the EPSS score is 0.57% (45th percentile), indicating a low likelihood of exploitation in the wild.
Eigent multi-agent workflow CI pipeline (ci.yml) uses pull_request_target with checkout of untrusted PR code, enabling arbitrary code execution with repository write permissions from fork PRs. PoC available, patch available.
Code injection in Eigent version 0.0.60 allows unauthenticated remote attackers to execute arbitrary code on the victim's machine or server, but the attack requires the victim to perform a single interaction ('1-click') with attacker-supplied content. The vulnerability is patched in version 0.0.61. No public exploit code or active exploitation has been identified at time of analysis; the EPSS score is 0.57% (45th percentile), indicating a low likelihood of exploitation in the wild.