An archived Cloudflare component contains a remote code execution vulnerability, posing a significant security risk to any active implementations.

This repository is affected by an OS command injection flaw. The vulnerability is triggered by unauthenticated interaction with specific components in the source code, which could allow an attacker to execute arbitrary commands on the system running the action.

The use of unmaintained, vulnerable third-party components exposes the CI/CD environment to remote code execution. With a CVSS score of 8.8, this vulnerability could allow attackers to manipulate build processes, steal environment variables, or compromise the integrity of deployed applications.

Immediate Action: Cease all use of the pages-action repository immediately. Transition to supported and actively maintained alternatives, such as the Cloudflare wrangler-action.

Proactive Monitoring: Audit existing CI/CD workflow configurations to identify where this specific action is utilized and monitor for unauthorized build modifications.

Compensating Controls: If immediate migration is not possible, implement strict network egress filtering for CI/CD runners to prevent the potential callback of malicious payloads.

Public Exploit Available: Unknown

The presence of this vulnerability in an archived and unmaintained project makes it a high-priority target for removal. Organizations must audit their infrastructure for the presence of this component and migrate to supported alternatives immediately to eliminate this risk.