CVE-2026-29075 Details
Description
Mesa is an open-source Python library for agent-based modeling, simulating complex systems and exploring emergent behaviors. In version 3.5.0 and prior, checking out of untrusted code in benchmarks.yml workflow may lead to code execution in privileged runner. This issue has been patched via commit c35b8cd.
A code execution vulnerability has been identified in the Mesa Python library, specifically in the GitHub Actions workflow file 'benchmarks.yml'. This issue affects versions of Mesa prior to 3.5.1. The vulnerability arises because the 'benchmarks.yml' workflow checks out code from the pull request branch and executes it in a privileged runner. A malicious 'setup.py' or 'benchmarks/global_benchmark.py' could be crafted to run arbitrary code, exploiting the fact that the runner has write privileges to issues and pull requests.
The vulnerability has been patched in Mesa version 3.5.1. Users are advised to update to this version. Additionally, the 'benchmarks.yml' workflow can be split into two separate workflows to mitigate the issue. The first workflow should run the benchmarks and be triggered on 'pull_request' events with read-only permissions. The second workflow can handle the 'Comment PR' step with the original permissions, using an artifact from the first workflow.
Metrics
CVSS 4.0 Severity and Vector Strings:
No CVSS 4.0 data is available for this CVE.
CVSS 3.x Severity and Vector Strings:
No data available for CVSS Version 2.0 on this CVE.
CISA-ADP
Assessed Mar 9, 2026References to Advisories, Solutions, and Tools
By selecting these links, you will be leaving this site. These are references gathered from the official CVE record and are not endorsed by Volerion.
| URL | Source(s) | Tag(s) |
|---|---|---|
| https://github.com/mesa/mesa/commit/c35b8cd67fc89dd680ae218e49b77f6e1ee07a27 | [email protected] | Patch |
| https://github.com/mesa/mesa/security/advisories/GHSA-3j55-5q6x-2h48 | [email protected] | MitigationVendor Advisory |
Weakness Enumeration
| CWE-ID | CWE Name | Source |
|---|---|---|
| CWE-94 | Improper Control of Generation of Code ('Code Injection') | [email protected] |
Affected Products
| Product | Versions |
|---|---|
| mesa project mesa | <= 3.5.0 |
CPE
Remediation
| |
Change History
4 change records found show changes
| Date | Action | Recorded By |
|---|---|---|
| Jun 17, 2026 | CVE Modified | [email protected] |
| Jun 17, 2026 | CVE Modified | CISA-ADP |
| Mar 11, 2026 | Initial Analysis | [email protected] |
| Mar 6, 2026 | New CVE Received | [email protected] |