Arbitrary Code Execution Vulnerability in Eigent CI Workflow

CVE-2026-22869

What is CVE-2026-22869?

A significant security flaw exists in the CI workflow of Eigent, enabling arbitrary code execution through untrusted pull requests. This vulnerability arises from the use of the pull_request_target trigger alongside the checkout of potentially harmful code from unverified sources. Attackers could exploit this weakness to gain unauthorized access, steal sensitive information, manipulate repository contents, or perform unauthorized actions such as posting comments or creating releases. It is crucial for users of Eigent Workforce to review their CI configurations and implement necessary security measures to mitigate these risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References