CVE-2025-25204: fallo de gravedad media en cli
`gh attestation verify` returns incorrect exit code during verification if no attestations are present
Publicada el · Actualizada el
Aviso por correo cuando entre en el KEV, tenga PoC pública o suba de nota.
13Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 6.3epss 0.4%
`gh` is GitHub’s official command line tool. Starting in version 2.49.0 and prior to version 2.67.0, under certain conditions, a bug in GitHub's Artifact Attestation cli tool `gh attestation verify` causes it to return a zero exit status when no attestations are present. This behavior is incorrect: When no attestations are present, `gh attestation verify` should return a non-zero exit status code, thereby signaling verification failure. An attacker can abuse this flaw to, for example, deploy malicious artifacts in any system that uses `gh attestation verify`'s exit codes to gatekeep deployments. Users are advised to update `gh` to patched version `v2.67.0` as soon as possible.
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:N/I:H/A:N
Productos afectados
cli · cliCVEs relacionadas — cli
En el mismo producto, de las más peligrosas a las menos.
CVE-2024-52308HIGHConnecting to a malicious Codespaces via GH CLI could allow command execution on the user's computerEPSS 0.9%CVE-2026-64654MEDIUMGitHub CLI: Terminal escape sequence injection in multiple `gh` commandsEPSS 0.8%CVE-2024-54132MEDIUMGitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerabilityEPSS 0.6%CVE-2026-64653MEDIUMGitHub CLI: Unescaped variable components in request URLs could allow path traversalEPSS 0.5%CVE-2026-64655LOWGitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN MatchingEPSS 0.3%CVE-2026-59831MEDIUMGitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious CodespaceEPSS 0.3%