Skip to content
OpenAdvisories
Critical · 10.0 Public exploit CVE-2026-27941 EUVD-2026-8804GHSA-9jgv-x8cq-296qPYSEC-2026-2246

OpenLIT Vulnerable to Remote Code Execution and Secret Exposure via Misuse of `pull_request_target` in GitHub Actions Workflows

Published Feb 26, 2026 · Updated Feb 26, 2026 · Assigned by GitHub_M

Vendor: openlit Product: openlit Package: openlit Ecosystem: PyPI

Description

OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged `GITHUB_TOKEN` and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix.

Affected products

VendorProductAffectedFixed
openlit openlit < 1.37.1 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

GitHub 1 repository

  • pvharmo2/gha-lab-6c3094af9e ★ 0 · Sep 4, 2026

    Authorized security-research lab reproducing CVE-2026-27941 (pwn request in pull_request_target workflows) — snapshot of openlit/openlit

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Affected packages

EcosystemPackageAffectedFixedRecord
PyPI openlit >= 1.36.2, < 1.37.1 1.37.1 PYSEC-2026-2246

References