Critical 10.0Published Feb 25, 2026

CVE-2026-27941OpenLIT Vulnerable to Remote Code Execution and Secret Exposure via Misuse of `pull_request_target` in GitHub Actions Workflows

Updated under an hour ago (Oct 28, 2026, 5:50 AM ET)

Does this affect you?

It affects openlit and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for openlit

Exploited in the last 30 days

OpenLIT is an open source platform for AI engineering. Prior to version 1.37.1, several GitHub Actions workflows in OpenLIT's GitHub repository use the `pull_request_target` event while checking out and executing untrusted code from forked pull requests. These workflows run with the security context of the base repository, including a write-privileged `GITHUB_TOKEN` and numerous sensitive secrets (API keys, database/vector store tokens, and a Google Cloud service account key). Version 1.37.1 contains a fix.

CVSS: 10.0 CRITICAL (v3.1, CNA)CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Weakness (CWE): CWE-829
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: GitHub_M
NVD analysis: Analyzed
Record last updated: Feb 26, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

openlit openlit openlit:openlit (from the name)	before 1.37.1	CNA record
openlit openlit_software_development_kit openlit:openlit_software_development_kit	from 1.36.2 before 1.37.1	NVD

References

References

https://github.com/openlit/openlit/security/advisories/GHSA-9jgv-x8cq-296q	x-refsource-confirm, exploit, mitigation, vendor-advisory
https://github.com/openlit/openlit/commit/4a62039a1659d6cbb8913172693f587b5fc2546c	x-refsource-misc, patch

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.