GitHub Actions RCE CVE-2025-4595 advisory

Vulnerability Summary Vulnerability Overview Vulnerability ID: CVE-2025-4595 Vulnerability Type: Remote Code Execution (RCE) Affected Components: Official GitHub Actions such as Risk Level: High (CVSS Score 9.8) Scope of Impact All GitHub repositories using official Actions such as Attackers can trigger the vulnerability via malicious Pull Requests to execute arbitrary code Remediation Upgrade to v4.2.0 or later Upgrade to v4.1.0 or later Upgrade to v5.6.0 or later Upgrade to v5.4.0 or later Upgrade to v4.6.0 or later Upgrade to v4.1.0 or later Upgrade to v3.0.0 or later Upgrade to v4.2.0 or later Upgrade to v4.4.0 or later Upgrade to v4.2.0 or later Upgrade to v8.0.0 or later Upgrade to v1.4.0 or later Upgrade to v1.1.0 or later Upgrade to v5.0.0 or later Upgrade to v1.0.0 or later Upgrade to v3.2.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to v1.0.0 or later Upgrade to **v1

Goal Reached Thanks to every supporter — we hit 100%!

GitHub Actions RCE CVE-2025-4595 advisory

More from this source