PT-2026-2803 · Eigent · Eigent

Colemurray · Published 2026-01-13 · Updated 2026-01-13 · CVE-2026-22869

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Eigent (affected versions not specified)

Description A critical security flaw exists in the CI workflow file (.github/workflows/ci.yml). This flaw permits arbitrary code execution originating from pull requests submitted from forked repositories that possess repository write permissions. The vulnerability stems from the use of the pull request target trigger in conjunction with the checkout of code from untrusted pull requests. Exploitation could allow an attacker to steal credentials, post comments, push code, or create releases.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

CVE-2026-22869

GHSA-GVH4-93CQ-5XXP

Affected Products

Eigent

References · 8

• 🔥 https://github.com/eigent-ai/eigent/pull/836 · Exploit
• 🔥 https://github.com/eigent-ai/eigent/security/advisories/GHSA-gvh4-93cq-5xxp · Exploit
• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/22xxx/CVE-2026-22869.json · Exploit
• https://github.com/eigent-ai/eigent/pull/837 · Patch
• https://github.com/eigent-ai/eigent/commit/bf02500bbbab0f01cd0ed8e6dc21fe5683d6bfb5 · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2026-22869 · Security Note
• https://osv.dev/vulnerability/CVE-2026-22869 · Vendor Advisory
• https://twitter.com/CVEnew/status/2011181445268840907 · Twitter Post