Vulnerability · Published Jan 13, 2026 · Assigned by GitHub_M

CVE-2026-22869Eigent Allows Arbitrary Code Execution via pull_request_target CI Workflow

High 8.9

In plain English

A high-severity code injection in eigent from eigent-ai. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.6% (higher than 51% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.

Severity (CVSS 4.0)8.9High

Exploit odds (30 days)0.6%top 49.4% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack tooling1Public PoC

Official description

Eigent is a multi-agent Workforce. A critical security vulnerability in the CI workflow (.github/workflows/ci.yml) allows arbitrary code execution from fork pull requests with repository write permissions. The vulnerable workflow uses pull_request_target trigger combined with checkout of untrusted PR code. An attacker can exploit this to steal credentials, post comments, push code, or create releases.

Affected products (as reported)

Vendor	Product	Versions
eigent-ai	eigent	< bf02500bbbab0f01cd0ed8e6dc21fe5683d6bfb5

Weakness: CWE-94 · Vector: CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P

References

https://github.com/eigent-ai/eigent/security/advisories/GHSA-gvh4-93cq-5xxp x_refsource_CONFIRM
https://github.com/eigent-ai/eigent/pull/836 x_refsource_MISC
https://github.com/eigent-ai/eigent/pull/837 x_refsource_MISC
https://github.com/eigent-ai/eigent/commit/bf02500bbbab0f01cd0ed8e6dc21fe5683d6bfb5 x_refsource_MISC