CVE-2026-45570Medium· 6.3▾ SunlitA flaw was found in go-git, a library used for Git operations. The component responsible for secure shell (SSH) communication does not correctly handle special characters in repository paths. This oversight allows a remote attacker to mani…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 34.7 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Exploit-prediction probability, daily snapshots since Aug 1.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CSAF
0.4%
6.3 → —
medium → low
— → 6.3
low → medium
6.3 → —
medium → low
— → 6.3
low → medium
6.3 → —
medium → low
— → 6.3
low → medium
Last analysed / modified upstream
0.4% → 0.4%
A flaw was found in go-git, a library used for Git operations. The component responsible for secure shell (SSH) communication does not correctly handle special characters in repository paths. This oversight allows a remote attacker to manipulate the command executed on the server by including a specially crafted repository path. This could result in the appending of additional shell commands, potentially leading to unintended actions on the system.
github.com/go-git/go-git: go-git: Shell command injection in SSH transport — rated Moderate by Red Hat. Released 2026-05-27, updated 2026-09-21.
Fixed:
Not affected:
Before you apply this update, make sure all previously released errata that are relevant to your system are applied.
For details on how to apply this update, refer to:
https://access.redhat.com/articles/11258 https://access.redhat.com/errata/RHSA-2026:67543
Affected packages:
github.com/go-git/go-git/v5 < 5.19.1github.com/go-git/go-git/v6 < 6.0.0-alpha.4github.com/go-git/go-git <= 4.7.0Patched in:
github.com/go-git/go-git/v5 5.19.1github.com/go-git/go-git/v6 6.0.0-alpha.4Field changes observed since this record was first indexed.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-44210Critical· 9.9kata-containers: Kata Containers: Privilege escalation and information disclosure via command-line argument injection (CVE-2026-44210)
CVE-2025-21613High· 8.1go-git: argument injection via the URL field (CVE-2025-21613)
CVE-2026-42284High· 7.5GitPython: GitPython: Arbitrary code execution via improper validation of clone options (CVE-2026-42284)
CVE-2026-42215High· 7.5GitPython: GitPython: Arbitrary command execution due to bypass of dangerous Git option checks (CVE-2026-42215)
CVE-2026-35536Medium· 5.4tornado: Tornado: Cookie attribute injection due to improper handling of cookie arguments (CVE-2026-35536)
CVE-2026-115372High· 8.5github.com/lxc/incus: Incus 7.3.0 before 7.5.0 Project Restriction Bypass via block.create_options (CVE-2026-115372)