CVE-2026-3854-lab

Flagship Lab 001: Git 푸시 옵션에서 RCE까지 공개적으로 문서화된 CVE-2026-3854의 취약점 개념에서 영감을 받은 로컬 Learning Lab 및 Research Lab입니다. 두 경험 모두 가상의 Git 서버인 ForgeDock을 대상으로 실제 인증된 Git 푸시를 사용합니다; Research Lab입니다. !CAUTION 이 프로젝트는 의도적으로 취약하게 만들어졌습니다. 로컬에서만 실행하세요. 해당 포트를 공용 또는 공유 네트워크에 노출하지 마세요. 프로덕션 용도로 사용하지 마세요. !NOTE 이...

Exploit_CVE-2026-3854

ExploitCVE-2026-3854 CVE-2026-3854는 GitHub.com 및 GitHub Enterprise Server에서 발생하는 원격 코드 실행RCE 취약점입니다. 이 취약점은 다음과 같이 git push 명령어에 명령을 주입하여 악용될 수 있습니다: root@kitploit: git push -o '' origin master 이 취약점의 악용 여부를 검토하려면 push 옵션에 ";"가 포함된 push 작업에 대해 /var/log/github-audit.log를 검토할 것을 권장합니다. 취약한 버전: GitH...

CVE-2026-58437

A flaw was found in Gitea. This vulnerability allows an attacker to manipulate repository visibility settings by leveraging specific Git push options. This could lead to unauthorized disclosure of repository information or unintended access control changes. Mitigation Mitigation for this issue is...

CVE-2026-58437 Repository Visibility Manipulation via Git Push Options

Repository Visibility Manipulation via Git Push Options...

CVE-2026-58437 Repository Visibility Manipulation via Git Push Options

Repository Visibility Manipulation via Git Push Options...

CVE-2026-58437

CVE-2026-58437 affects Gitea: Git push options repo.private and repo.template can alter an existing repo’s visibility or template status when pushed by an admin/owner, bypassing standard audits and notifications. Affected code path in routers/private/hook_post_receive.go reads push options and, i...

GO-2026-6047 Gitea: Repository Visibility Manipulation via Git Push Options in gitea.dev

Gitea: Repository Visibility Manipulation via Git Push Options in gitea.dev...

Gitea: Repository Visibility Manipulation via Git Push Options

Repository Visibility Manipulation via Git Push Options | Field | Value | |-------|-------| | Affected File | routers/private/hookpostreceive.go | | Affected Function | HookPostReceive | | Affected Lines | 173–225 | | Prerequisite | Attacker must have owner-level or admin collaborator access to t...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging through the processing of undocumented git push options in the HookPostReceive function. An attacker can change the visibility or template status of a repository without triggering audit logs, webhooks, or...

GHSA-8P9H-49RC-QGXJ Gitea: Repository Visibility Manipulation via Git Push Options

Repository Visibility Manipulation via Git Push Options | Field | Value | |-------|-------| | Affected File | routers/private/hookpostreceive.go | | Affected Function | HookPostReceive | | Affected Lines | 173–225 | | Prerequisite | Attacker must have owner-level or admin collaborator access to t...

Insufficient Logging

Overview Affected versions of this package are vulnerable to Insufficient Logging through the processing of undocumented git push options in the HookPostReceive function. An attacker can change the visibility or template status of a repository without triggering audit logs, webhooks, or...

PT-2026-63303

Name of the Vulnerable Software and Affected Versions Gitea affected versions not specified Description Gitea contains an issue where the post-receive git hook handler incorrectly processes git push options on existing repositories. Users with owner or admin-collaborator access can use the...

OESA-2026-2307 python-GitPython security update

GitPython is a python library used to interact with git repositories, high-level like git-porcelain, or low-level like git-plumbing. Security Fixes: Summary GitPython blocks dangerous Git options such as --upload-pack and --receive-pack by default, but the equivalent Python kwargs uploadpack and...

GitHub Enterprise 3.x < 3.14.25 / 3.15.x < 3.15.20 / 3.16.x < 3.16.16 / 3.17.x < 3.17.13 / 3.18.x < 3.18.7 / 3.19.x < 3.19.4 RCE (CVE-2026-3854)

The version of GitHub Enterprise installed on the remote host is affected by a remote code execution vulnerability: - An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote...

CVE-2026-3854

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly...

EUVD-2026-10745

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly...

CVE-2026-3854

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly...

CVE-2026-3854

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly...

CVE-2026-3854

CVE-2026-3854 describes an RCE vulnerability in GitHub Enterprise Server arising during git push option handling. An attacker with push access could abuse unsanitized user-supplied push option values that are incorporated into internal service headers; because the header format uses a delimiter t...

CVE-2026-3854

An improper neutralization of special elements vulnerability was identified in GitHub Enterprise Server that allowed an attacker with push access to a repository to achieve remote code execution on the instance. During a git push operation, user-supplied push option values were not properly...