Skip to content
OpenAdvisories
High · 8.9 Public exploit CVE-2026-22869 EUVD-2026-2414

Eigent Allows Arbitrary Code Execution via pull_request_target CI Workflow

Published Jan 13, 2026 · Updated Jan 14, 2026 · Assigned by GitHub_M

Vendor: eigent-ai Product: eigent

Description

Eigent is a multi-agent Workforce. A critical security vulnerability in the CI workflow (.github/workflows/ci.yml) allows arbitrary code execution from fork pull requests with repository write permissions. The vulnerable workflow uses pull_request_target trigger combined with checkout of untrusted PR code. An attacker can exploit this to steal credentials, post comments, push code, or create releases.

Affected products

VendorProductAffectedFixed
eigent-ai eigent < bf02500bbbab0f01cd0ed8e6dc21fe5683d6bfb5 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • pvharmo2/gha-lab-7927d7d06f ★ 0 · Sep 4, 2026

    Security-research lab reproducing CVE-2026-22869 (pwn) — arbitrary code execution in privileged pull_request_target run via npx local-bin hijack, snapshot of eigent-ai/eigent @ 2a406536

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

References