Path Traversal Vulnerability in Git from GitLab
CVE-2026-113408

3.3LOW

Key Information:

Vendor

Git

Status
Git
Vendor
CVE Published:
12 November 2026

What is CVE-2026-113408?

A path traversal flaw in Git allows an attacker to manipulate file paths in order to write to arbitrary files. This vulnerability arises during the process of cloning and committing to a malicious repository, which can lead to unauthorized access and modifications within the file system. Proper validation of input paths is essential to mitigate this risk and protect sensitive data from potential exploitation.

Affected Version(s)

Git 2.50.1

Git 2.51.2

Git 2.52.0

References

https://gitlab.com/gitlab-org/git/-/work_items/809

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
Low
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ehdgks0627, un3xploitable
.