Workflows triggered by a pull request review were read from the commit specified in the `commit id` of the review, but the system failed to verify if that commit belonged to the reviewed pull request. This allowed a user with read access to a repository to submit a review referencing a commit they controlled. On instances with an active runner, this could lead to the execution of an unauthorized workflow that gains access to the repository and owner's Actions secrets, as well as a `GITEA TOKEN` with write permissions to the repository.