CVE-2026-114134High▾ TwilightBlack: GitHub Action installs unvalidated required-version from pyproject.toml
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 41.3 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
The GitHub Action bundled with Black can read the version from tool.black.required-version if use_pyproject is set to True. This version is not validated and therefore can be used to execute untrusted code in the context of a victim's repository.
This is similar to the previous CVE-2026-31900. The value in tool.black.required-version is accepted as the version to be installed by the action without validation.
Reproduction requires a victim to use Black's GitHub Action with use_pyproject: true. The attacker would then issue a PR to the victim's repository with pyproject.toml edited so that Black points to a malicious repository.
This is a remote code execution vulnerability impacting users using the GitHub Action bundled with psf/black and using the use_pyproject: true setting.
black < 26.10.1Upgrade to a patched release:
black 26.10.1Connected by shared product, vendor, weakness, or advisory.
CVE-2024-21503Medium· 5.3Black vulnerable to Regular Expression Denial of Service (ReDoS)
CVE-2026-31900Critical· 9.8Black is the uncompromising Python code formatter. Black provides a GitHub action for formatting code. This action supports an option, us…
CVE-2026-61437High· 7.8PraisonAI: Unsafe Dynamic Module Loading Leads to Arbitrary Code Execution via tools.py in AgentFlow
CVE-2026-105745Medium· 6.7Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem
CVE-2026-55522High· 7.8PraisonAI is a multi-agent teams system
CVE-2026-5241High· 7.7python-transformers: python-transformers: Arbitrary code execution due to overridden trust_remote_code setting (CVE-2026-5241)