---
id: CVE-2026-100419
title: >-
  gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability
  in the worktree checkout mechanism that allows attackers to escape the
  worktree directory via symlink manipulation
summary: >-
  gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability
  in the worktree checkout mechanism that allows attackers to escape the
  worktree directory via symlink manipulation. During forced checkout with
  overwrite_exist…
severity: high
cvss: 7
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H'
cwe:
  - CWE-59
vendor: GitoxideLabs
product: gitoxide
affected:
  - gitoxide < 0.23.0
published: '2026-09-25'
updated: '2026-09-28'
sourceUpdated: '2026-09-28T14:17:09.210'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-100419'
references:
  - url: 'https://github.com/GitoxideLabs/gitoxide'
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/GitoxideLabs/gitoxide/blob/gix-fs-v0.22.1/gix-fs/src/stack.rs#L185-L196
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/GitoxideLabs/gitoxide/commit/b62498378b8bc2c95863a044b700f2063b0b5875
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-6p9q-f2xg-6pr5
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-f89h-2fjh-2r9q
    label: disclosure@vulncheck.com
  - url: >-
      https://www.vulncheck.com/advisories/gitoxide-gix-fs-before-0.23.0-worktree-escape-via-symlink
    label: disclosure@vulncheck.com
  - url: >-
      https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-f89h-2fjh-2r9q
    label: 134c704f-9b21-4f2e-91b3-4a467353bcc0
  - url: >-
      https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100419.json
  - url: 'https://access.redhat.com/security/cve/CVE-2026-100419'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2541673'
  - url: 'https://www.cve.org/CVERecord?id=CVE-2026-100419'
  - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-100419'
tags:
  - nvd
  - cve.org
  - csaf
  - vex
  - red-hat
  - exploit-available
epss: 0.00222
epssPercentile: 0.12739
exploitAvailable: true
ssvc:
  exploitation: poc
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-28T13:05:49.724852Z'
ingestedAt: '2026-09-25T22:20:31.554Z'
---

## Overview

gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwrite_existing enabled, attackers can craft malicious repository trees where symlink entries replace validated directories, causing subsequent files to be written outside the worktree through the symlink for code execution or file manipulation.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

## Vendor advisories

- **Red Hat VEX** · Moderate · affected: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux AI (RHEL AI) 3 · no fix planned: Red Hat Enterprise Linux 10, Red Hat Enterprise Linux AI (RHEL AI) 3 · updated 2026-10-01 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-100419.json)