ToolJet’s render preview deployment workflow interpolated github.event.comment.body directly into a bash conditional in a run step, allowing an attacker to inject arbitrary shell commands through a GitHub comment. These commands execute on the CI runner and can read or exfiltrate deployment secrets stored in the runner environment. The flaw is a classic command injection (CWE‑78) and could compromise the confidentiality of sensitive deployment data.

ToolJet, the open‑source low‑code platform for building internal tools, is affected on all released versions prior to 3.20.180. The vulnerability applies to any deployment pipeline that uses the GitHub Actions‑based render preview workflow in those versions.

The CVSS score of 4.7 indicates moderate severity, while the EPSS score of less than 1% suggests a low probability of exploitation. Attackers would need the ability to comment on a pull request used for deployment; with such access they can inject shell commands that run on the CI runner and read or exfiltrate deployment secrets. The flaw is not listed in CISA KEV.