7.3
High
CVE-2026-100419 gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that…
Description
gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwrite_existing enabled, attackers can craft malicious repository trees where symlink entries replace validated directories, causing subsequent files to be written outside the worktree through the symlink for code execution or file manipulation.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| gitoxide 0.23 | earliest → < 0.23.0 | 0.23.0 |
References
- GitHub Security Advisory (GHSA-6p9q-f2xg-6pr5) github.com
- Patch Commit github.com
- gix-fs 0.22.1 stack.rs pop loop and disarmed guard github.com
- GitHub Security Advisory (GHSA-f89h-2fjh-2r9q) github.com
- github.com github.com
- VulnCheck Advisory: gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink www.vulncheck.com
Timeline
- Published
- Last modified
Other CVEs of gitoxide
The 16 CVEs of gitoxide →
CVE-2026-91986
gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing…
5.3
Medium
CVE-2025-24890
gitoxide is an implementation of git written in Rust
6.8
Medium
CVE-2026-82254
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from…
8.7
High
CVE-2026-82255
gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where…
7.6
High