CVE-2026-29075 Mesa: Checking out of untrusted code in `benchmarks.yml` workflow may lead to code execution in privileged runner
Attackers can execute arbitrary code on privileged CI runners by exploiting untrusted code checkout in the Mesa library's benchmark workflow.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-29075?
CVE-2026-29075 is a high-severity code injection vulnerability in mesa, published on 6 Mar 2026. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commit c35b8cd.
Weakness: CWE-94
Which versions are affected by CVE-2026-29075?
It affects 1 product.
Products include Mesa Project Mesa.
How do I fix CVE-2026-29075?
No fix has been published for CVE-2026-29075 yet. Limit exposure of the affected software until one is available.
Upgrade, and never evaluate templates, expressions or code built from user input. More about Code injection.
Is CVE-2026-29075 being exploited?
There is no known exploitation of CVE-2026-29075 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-3j55-5q6x-2h48.