xygeni/xygeni-action

GHSA-f8q5-h5qh-33mh

GitHub Actionsbackdoor3/11/2026
Description

xygeni-action v5 tag poisoned with C2 backdoor

References (4)
https://github.com/xygeni/xygeni-action/security/advisories/GHSA-f8q5-h5qh-33mhgithub_advisoryhttps://nvd.nist.gov/vuln/detail/CVE-2026-31976github_advisoryhttps://github.com/xygeni/xygeni-action/issues/54github_advisoryhttps://github.com/xygeni/xygeni-actiongithub_advisory
Details
EcosystemGitHub Actions
Attack Typebackdoor
Published3/11/2026
Affected Versions
5
Related CVEs
CVE-2026-31976
Aliases
CVE-2026-31976
Quick Actions
All IncidentsGitHub Actions Incidents
Agentic AI · Pentesting

Ready for Agentic Automated Testing?

Deploy autonomous AI agents that reason, exploit, and validate complex vulnerability chains — not another scanner, an agentic system that thinks like a senior pentester.

Zero false positives
PoC for every finding
30+ tools orchestrated
Book a DemoLearn More
Setup in 5 minutesSOC 2 & ISO 27001