CVE-2026-54344 ToolJet GitHub Actions comment body shell injection exposes deployment secrets

Medium 4.7 Published 8 Jul 2026 Updated 8 Jul 2026

Attackers can execute shell commands on CI runners and steal secrets by injecting code into GitHub pull request comments in ToolJet.

Exploited in the wild: Not known
Login needed: Not needed
Attackable: Local or same network only
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-54344?

CVE-2026-54344 is a medium-severity command injection vulnerability in ToolJet, published on 8 Jul 2026. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

ToolJet is an open-source low-code platform for building internal tools. Prior to 3.20.180, ToolJet's render preview deployment workflow interpolates github.event.comment.body directly into a bash conditional in a run step, allowing any GitHub user who can comment on an open pull request with a deploy command to execute shell commands on the CI runner and exfiltrate deployment secrets. This issue is reported as fixed in version 3.20.180.

Weakness: CWE-78

Which versions are affected by CVE-2026-54344?

It affects 1 product.

Products include Tooljet Tooljet.

How do I fix CVE-2026-54344?

No fix has been published for CVE-2026-54344 yet. Limit exposure of the affected software until one is available.

Upgrade, and pass arguments to programs as a list instead of through a shell. More about Command injection.

Is CVE-2026-54344 being exploited?

It is not confirmed as exploited in the wild, but public exploit code for CVE-2026-54344 exists.

Sources

Also known as GHSA-4pm2-w6g5-28mm.