Out-of-Bounds Write Vulnerability in Git Software by GitLab
CVE-2026-114467

3.3LOW

Key Information:

Vendor

Git

Status
Git
Vendor
CVE Published:
12 November 2026

What is CVE-2026-114467?

A vulnerability exists in Git that allows for an out-of-bounds write when the git-merge command is executed on a tag that contains more than two GPG signatures. This can potentially lead to data corruption or unauthorized access, underscoring the importance of prompt updates and security measures.

Affected Version(s)

Git 2.50.1

Git 2.51.2

Git 2.52.0

References

https://gitlab.com/gitlab-org/git/-/work_items/810

CVSS V3.1

Score:
3.3
Severity:
LOW
Confidentiality:
None
Integrity:
None
Availability:
None
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
Required
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

ehdgks0627, un3xploitable
.