Woofun AI reports that a high-risk vulnerability named 'Cordyceps' has been identified in CI/CD systems, impacting open-source repositories maintained by Microsoft, Google, Apache, and Cloudflare. The exploit enables attackers to bypass security controls using only a free GitHub account, allowing them to submit malicious pull requests and forge approval comments. This process facilitates the theft of server keys and the injection of malicious code, resulting in full control over corporate code repositories without requiring existing system permissions.