High severity · published Jul 8, 2026
CVE-2026-54344
ToolJet GitHub Actions comment body shell injection exposes deployment secrets
8.8
CVSS
0.4%
EPSS
No
On KEV
Description
ToolJet is an open-source low-code platform for building internal tools. Prior to 3.20.180, ToolJet's render preview deployment workflow interpolates github.event.comment.body directly into a bash conditional in a run step, allowing any GitHub user who can comment on an open pull request with a deploy command to execute shell commands on the CI runner and exfiltrate deployment secrets. This issue is reported as fixed in version 3.20.180.
CVSS vector
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Adjacent
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 30% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
TO
ToolJet · ToolJet
< 3.20.180 · source: vendor, NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-54344
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-54344
Exploit
https://github.com/ToolJet/ToolJet/security/advisories/GHSA-4pm2-w6g5-28mm
More from ToolJet
9.9
CVE-2026-82874
ToolJet before v3.16.208 Cross-Tenant Authorization Bypass via tooljet-db
9.6
CVE-2026-82870
ToolJet before v3.16.208 Cross-Tenant Database Manipulation
9.4
CVE-2026-55413
ToolJet - Marketplace Plugin Poisoning Enables Instance-Wide Remote Code Execution
9.1
CVE-2026-82872
ToolJet before v3.16.208 Cross-Workspace Authorization Bypass
8.8
CVE-2022-3019
The forgot password token basically just makes us capable of taking over the account of whoever comment in an app that we can see (bruteforcing comment id's might also be an…