{"id":"CVE-2026-27941","aliases":["EUVD-2026-8804","GHSA-9jgv-x8cq-296q","PYSEC-2026-2246"],"status":"published","title":"OpenLIT Vulnerable to Remote Code Execution and Secret Exposure via Misuse of `pull_request_target` in GitHub Actions Workflows","description":"OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged `GITHUB_TOKEN` and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix.","severity":{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00454,"percentile":0.39812,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":true},"cwes":["CWE-829"],"published":"2026-02-26T01:17:22Z","modified":"2026-10-28T02:30:45Z","exploits":[{"source":"pocgithub","id":"pvharmo2/gha-lab-6c3094af9e","title":"pvharmo2/gha-lab-6c3094af9e","date":"2026-09-04","url":"https://github.com/pvharmo2/gha-lab-6c3094af9e"}],"fixes":[{"ecosystem":"PyPI","package":"openlit","fixed_in":["1.37.1"],"sources":["osv"]}],"affected":[{"source":"osv","ecosystem":"PyPI","package":"openlit","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"1.36.2"},{"fixed":"1.37.1"}]}],"versions":["1.36.2","1.36.3","1.36.6","1.36.7","1.36.8","1.36.9","1.37.0"]}],"products":[{"vendor":"openlit","product":"openlit"},{"vendor":"openlit","product":"openlit_software_development_kit"}],"references":[{"url":"https://github.com/openlit/openlit/security/advisories/GHSA-9jgv-x8cq-296q","tags":["x_refsource_CONFIRM","Exploit","Mitigation","Vendor Advisory","advisory","evidence"]},{"url":"https://github.com/openlit/openlit/commit/4a62039a1659d6cbb8913172693f587b5fc2546c","tags":["x_refsource_MISC","Patch","fix"]},{"url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/27xxx/CVE-2026-27941.json","tags":["advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-27941","tags":["advisory"]}],"sources":{"cve":[{"id":"CVE-2026-27941","title":"OpenLIT Vulnerable to Remote Code Execution and Secret Exposure via Misuse of `pull_request_target` in GitHub Actions Workflows","description":"OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged `GITHUB_TOKEN` and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix.","status":"published","published":"2026-02-26T01:17:22.532Z","modified":"2026-02-26T15:54:11.519Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T14:19:49.199185Z"}],"euvd":[{"id":"EUVD-2026-8804","description":"OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged `GITHUB_TOKEN` and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix.","status":"published","published":"2026-02-26T01:17:22Z","modified":"2026-02-26T15:54:11Z","cvss":[{"version":"3.1","score":10,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T19:48:26.495238Z"}],"nvd":[{"id":"CVE-2026-27941","description":"OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged `GITHUB_TOKEN` and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix.","status":"published","published":"2026-02-26T02:16:22.16Z","modified":"2026-06-17T10:27:56.773Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T14:12:07.027269Z"}],"osv":[{"id":"CVE-2026-27941","title":"OpenLIT Vulnerable to Remote Code Execution and Secret Exposure via Misuse of `pull_request_target` in GitHub Actions Workflows","description":"OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged `GITHUB_TOKEN` and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix.","status":"published","published":"2026-02-26T01:17:22.532Z","modified":"2026-10-28T02:30:45.413669602Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-829"],"updated_at":"2026-11-02T15:45:00.180685Z"},{"id":"PYSEC-2026-2246","description":"OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged `GITHUB_TOKEN` and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix.","status":"published","published":"2026-02-26T02:16:22.16Z","modified":"2026-07-13T07:15:39.568243055Z","cvss":[{"version":"3.1","score":9.9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T15:52:55.537808Z"}]}}