7.3
Élevée
CVE-2026-100419 gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that…
Description
gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwrite_existing enabled, attackers can craft malicious repository trees where symlink entries replace validated directories, causing subsequent files to be written outside the worktree through the symlink for code execution or file manipulation.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| gitoxide 0.23 | premières → < 0.23.0 | 0.23.0 |
Références
- GitHub Security Advisory (GHSA-6p9q-f2xg-6pr5) github.com
- Patch Commit github.com
- gix-fs 0.22.1 stack.rs pop loop and disarmed guard github.com
- GitHub Security Advisory (GHSA-f89h-2fjh-2r9q) github.com
- github.com github.com
- VulnCheck Advisory: gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink www.vulncheck.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de gitoxide
Les 16 CVE de gitoxide →
CVE-2026-91986
gitoxide gix-transport before 0.59.2 fails to filter control characters in git-daemon connect requests, allowing…
5.3
Moyenne
CVE-2025-24890
gitoxide is an implementation of git written in Rust
6.8
Moyenne
CVE-2026-82254
gitoxide before 0.69.0 contains unchecked array indexing in delta application and uncapped allocation from…
8.7
Élevée
CVE-2026-82255
gitoxide versions from 0.25.4 contain an HTTP credential leak vulnerability in the curl-based transport backend where…
7.6
Élevée