CVE-2026-67308 is a critical vulnerability affecting Wazuh platform integrations with GitHub Actions. Versions prior to commit 44bf114 improperly sanitize VERSION.json inputs in pull requests, enabling attackers to inject shell metacharacters into environment variables. These variables are directly interpolated into workflow run steps, permitting arbitrary command execution on self-hosted runners. Successful exploitation could exfiltrate sensitive credentials, including GITHUB_TOKEN and AWS access keys. All users of vulnerable Wazuh-GitHub Actions workflows are affected. The CVSS score of 10.0 reflects the severity of unrestricted remote code execution and credential theft risks. Immediate mitigation requires updating to the patched version (44bf114+) and validating all workflow inputs for unsafe character patterns. Organizations utilizing self-hosted runners should prioritize remediation due to elevated secret exposure risks.