CVE-2026-29075

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-29075", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-03-03T20:51:43.483Z", "datePublished": "2026-03-06T16:30:08.146Z", "dateUpdated": "2026-03-09T15:00:07.203Z"}, "containers": {"cna": {"title": "Mesa: Checking out of untrusted code in `benchmarks.yml` workflow may lead to code execution in privileged runner", "problemTypes": [{"descriptions": [{"cweId": "CWE-94", "lang": "en", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')", "type": "CWE"}]}], "metrics": [{"cvssV3_1": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "version": "3.1"}}], "references": [{"name": "https://github.com/mesa/mesa/security/advisories/GHSA-3j55-5q6x-2h48", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/mesa/mesa/security/advisories/GHSA-3j55-5q6x-2h48"}, {"name": "https://github.com/mesa/mesa/commit/c35b8cd67fc89dd680ae218e49b77f6e1ee07a27", "tags": ["x_refsource_MISC"], "url": "https://github.com/mesa/mesa/commit/c35b8cd67fc89dd680ae218e49b77f6e1ee07a27"}], "affected": [{"vendor": "mesa", "product": "mesa", "versions": [{"version": "<= 3.5.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-06T16:30:08.146Z"}, "descriptions": [{"lang": "en", "value": "Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commit c35b8cd."}], "source": {"advisory": "GHSA-3j55-5q6x-2h48", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-03-09T14:59:53.798140Z", "id": "CVE-2026-29075", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-09T15:00:07.203Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-29075", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "yes"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-03-09T14:59:53.798140Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-03-09T14:59:57.569Z"}}], "cna": {"title": "Mesa: Checking out of untrusted code in `benchmarks.yml` workflow may lead to code execution in privileged runner", "source": {"advisory": "GHSA-3j55-5q6x-2h48", "discovery": "UNKNOWN"}, "metrics": [{"cvssV3_1": {"scope": "CHANGED", "version": "3.1", "baseScore": 8.3, "attackVector": "NETWORK", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "integrityImpact": "LOW", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "LOW", "privilegesRequired": "NONE", "confidentialityImpact": "LOW"}}], "affected": [{"vendor": "mesa", "product": "mesa", "versions": [{"status": "affected", "version": "<= 3.5.0"}]}], "references": [{"url": "https://github.com/mesa/mesa/security/advisories/GHSA-3j55-5q6x-2h48", "name": "https://github.com/mesa/mesa/security/advisories/GHSA-3j55-5q6x-2h48", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/mesa/mesa/commit/c35b8cd67fc89dd680ae218e49b77f6e1ee07a27", "name": "https://github.com/mesa/mesa/commit/c35b8cd67fc89dd680ae218e49b77f6e1ee07a27", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commit c35b8cd."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-94", "description": "CWE-94: Improper Control of Generation of Code ('Code Injection')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-03-06T16:30:08.146Z"}}}, "cveMetadata": {"cveId": "CVE-2026-29075", "state": "PUBLISHED", "dateUpdated": "2026-03-09T15:00:07.203Z", "dateReserved": "2026-03-03T20:51:43.483Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-03-06T16:30:08.146Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "mesa", "vendor": "mesa", "versions": [{"status": "affected", "version": "<= 3.5.0"}]}], "source": "security-advisories@github.com"}], "configurations": [{"nodes": [{"cpeMatch": [{"criteria": "cpe:2.3:a:mesa_project:mesa:*:*:*:*:*:python:*:*", "matchCriteriaId": "FDC8696B-D702-4572-88EB-AA96A9CD65E7", "versionEndIncluding": "3.5.0", "vulnerable": true}], "negate": false, "operator": "OR"}]}], "cveTags": [], "descriptions": [{"lang": "en", "value": "Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commit c35b8cd."}, {"lang": "es", "value": "Mesa es una librer\u00eda Python de c\u00f3digo abierto para modelado basado en agentes, simulando sistemas complejos y explorando comportamientos emergentes. En la versi\u00f3n 3.5.0 y anteriores, la extracci\u00f3n de c\u00f3digo no confiable en el flujo de trabajo benchmarks.yml puede llevar a la ejecuci\u00f3n de c\u00f3digo en un ejecutor privilegiado. Este problema ha sido parcheado a trav\u00e9s del commit c35b8cd."}], "id": "CVE-2026-29075", "lastModified": "2026-06-17T10:29:33.457", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "LOW", "baseScore": 8.3, "baseSeverity": "HIGH", "confidentialityImpact": "LOW", "integrityImpact": "LOW", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:L", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 3.7, "source": "security-advisories@github.com", "type": "Secondary"}, {"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "HIGH", "baseScore": 9.8, "baseSeverity": "CRITICAL", "confidentialityImpact": "HIGH", "integrityImpact": "HIGH", "privilegesRequired": "NONE", "scope": "UNCHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 5.9, "source": "nvd@nist.gov", "type": "Primary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-29075", "options": [{"exploitation": "none"}, {"automatable": "yes"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-03-09T14:59:53.798140Z", "version": "2.0.3"}}]}, "published": "2026-03-06T17:16:34.167", "references": [{"source": "security-advisories@github.com", "tags": ["Patch"], "url": "https://github.com/mesa/mesa/commit/c35b8cd67fc89dd680ae218e49b77f6e1ee07a27"}, {"source": "security-advisories@github.com", "tags": ["Mitigation", "Vendor Advisory"], "url": "https://github.com/mesa/mesa/security/advisories/GHSA-3j55-5q6x-2h48"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Analyzed", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-94"}], "source": "security-advisories@github.com", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,3.5.0]"}}], "enrichment": {"confidence": 100.0, "confidence_source": "cna", "scores": [{"score": 100.0, "source": "cna"}]}, "product": "mesa", "vendor": "mesa"}], "analysis": {"en": {"generated_at": "2026-04-16T11:19:51.149441+00:00", "value": {"mitigation_remediation": ["Upgrade the Mesa library to a version newer than 3.5.0, which includes the patch that fixes the code injection risk.", "If an upgrade is not immediately possible, apply the hot\u2011fix commit c35b8cd to the source of the benchmarks.yml workflow or to the repository containing the library.", "Restrict the benchmarks.yml workflow to run only with trusted source code, and remove or disable privileged runners until the update is performed."], "summary": {"action": "Immediate Patch", "impact": "Remote Code Execution"}, "threat_synthesis": {"affected_systems": "The vulnerability affects the Mesa library (mesa:mesa) versions 3.5.0 and older. All installations that rely on these versions and use the benchmarks.yml CI workflow are susceptible. The issue was resolved by commit c35b8cd, so newer releases are not affected.", "description_and_impact": "Mesa is an open\u2011source Python library. In versions 3.5.0 and earlier, the benchmarks.yml workflow could be manipulated to execute arbitrary code in a privileged GitHub Actions runner. The flaw is a classic code injection error (CWE\u201194). This allows an attacker to run malicious commands with the permissions of the runner, creating a full compromise of the CI environment.", "risk_and_exploitability": "The CVSS score is 8.3, reflecting high severity. The EPSS score is less than 1\u202f%, indicating low probability of widespread exploitation at present, and the vulnerability is not listed in CISA\u2019s KEV catalog. Attackers would need to supply untrusted code checked out by the benchmarks.yml workflow, but the vulnerability can be triggered directly in a privileged runner without additional prerequisites. Until a patch is applied, the risk remains high for CI environments that run the workflow."}}}}, "created": "2026-03-09T10:07:19.775122+00:00", "updated": "2026-04-16T11:30:15.900246+00:00", "vendors": ["mesa", "mesa$PRODUCT$mesa"]}