# CVE-2026-54344: ToolJet OS command injection in GitHub Actions deployment workflow

Source: https://junglewise.ai/threats/cve-2026-54344-tooljet-os-command-injection-in-github-actions-deployment  
Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats  
Published: 2026-07-08. Updated: 2026-07-08  
License: CC BY 4.0 with a link back

CVE-2026-54344 · Severity: medium · CVSS 4.7 · Published 2026-07-08

ToolJet is an open-source platform used by businesses to build internal software tools. A security flaw in its automated testing and deployment system allowed any GitHub user to execute malicious commands by simply commenting on a public pull request. This could lead to the theft of sensitive credentials, including API keys for cloud infrastructure and email services, potentially compromising the company's entire deployment environment.

Technologies: [ToolJet](https://junglewise.ai/threats/technologies/tooljet). Vendors: [ToolJet](https://junglewise.ai/threats/vendors/tooljet).

## Quick answers

**Is CVE-2026-54344 exploited in the wild?** No. Junglewise Threat Intelligence has no report of CVE-2026-54344 being exploited in the wild.

**How severe is CVE-2026-54344?** Medium severity, with a CVSS score of 4.7, published 8 July 2026.

**Which products and versions are affected?** ToolJet < 3.20.180.

**Is there a fix for CVE-2026-54344?** A patch was published on 2026-07-08: Fixed in version 3.20.180 Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.

**How is CVE-2026-54344 attacked?** It is attacked over the network, in a hosted service.

**Am I affected by CVE-2026-54344?** Check whether you run ToolJet at an affected version. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.

## Technical details

A command injection vulnerability exists in ToolJet's 'render-preview-deploy.yml' GitHub Actions workflow. The workflow directly interpolates the 'github.event.comment.body' context into a bash script within a 'run' step without sanitization or using environment variables. Because the workflow triggers on any comment containing '/deploy-ee' without verifying the author's permissions, an unauthenticated attacker can craft a comment that breaks out of the bash conditional to execute arbitrary code on the CI runner. This allows for the exfiltration of sensitive secrets, including RENDER_API_KEY, CUSTOM_GITHUB_TOKEN, and SMTP credentials. The issue is fixed in version 3.20.180 by using environment variables for shell expansion and adding author association checks.

## Affected products

- ToolJet ToolJet < 3.20.180

## Timeline

- 2026-06-30: advisory: GitHub Security Advisory GHSA-4pm2-w6g5-28mm published
- 2026-07-08: disclosed: CVE-2026-54344 published to NVD
- 2026-07-08: patched: Fixed in version 3.20.180

## References

- [https://github.com/ToolJet/ToolJet/security/advisories/GHSA-4pm2-w6g5-28mm](https://github.com/ToolJet/ToolJet/security/advisories/GHSA-4pm2-w6g5-28mm)

## Related threats

- [ToolJet authorization bypass in app environments init endpoint](https://junglewise.ai/threats/cve-2026-70642-tooljet-before-3-21-94-fixed-in-commit-e5f387a-contains-an)
- [ToolJet missing authentication in onboarding signup endpoint](https://junglewise.ai/threats/cve-2026-126795-a-vulnerability-was-determined-in-tooljet-up-to-3-20-256-lts-3)
- [ToolJet authorization bypass in TooljetDB controller](https://junglewise.ai/threats/cve-2026-82875-tooljet-authorization-bypass-in-tooljetdb-controller)
- [ToolJet cross-tenant authorization bypass in tooljet-db endpoints](https://junglewise.ai/threats/cve-2026-82874-tooljet-cross-tenant-authorization-bypass-in-tooljet-db-endpoints)
- [ToolJet authorization bypass in resources export endpoint](https://junglewise.ai/threats/cve-2026-82873-tooljet-authorization-bypass-in-resources-export-endpoint)