A vulnerability was found in the distributed-workloads repository's pull_request_target workflow. This flaw allows a remote attacker to submit a specially crafted pull request that executes untrusted code with access to sensitive repository secrets, including the SNYK_TOKEN and the repository's default write token. Exploitation could lead to exfiltration of these secrets, unauthorized access to the Snyk integration, and potential control over the repository. The issue has been remediated by deleting the vulnerable workflow and removing the exposed secret.