CVE-2026-3854

Reported Context (2)

GitHub RCE (CVE-2026-3854), a remote code execution vulnerability in GitHub that could expose developer environments to arbitrary code execution. Wiz Highlights AI Security Products and Research Six Months After Joining Google
interesting findings from this research was the discovery of a critical RCE vulnerability in GitHub (CVE-2026-3854). This discovery – which resulted in the biggest bug bounty ever paid out in GitHub's history – serves Wiz Says Atlas AI Agent Found 200+ Vulnerabilities in Audited Open-Source Projects

Malware (1)

Vendors (7)

Products (12)

Tools (8)

Industries (2)

Note: Related entities, including threat actors, malware, CVEs, MITRE ATT&CK techniques, vendors, products, tools, countries, and industries, are shown when they appear in the same reporting. Their presence does not necessarily mean they were targeted, compromised, vulnerable, responsible for the activity, or directly involved in the incident.