CVE-2026-114096highCWE-59

CVE-2026-114096: falha de alta gravidade em jelmer dulwich

Dulwich 0.24.0 before 1.2.8 Symlink Write-Through via porcelain.checkout paths

Publicada em · Atualizada em

Seguir esta CVE+ Monitorar dulwich+ Monitorar dulwich

Aviso por e-mail quando ela entrar no KEV, ganhar PoC pública ou subir de nota.

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.3epss 0.2%
Dulwich from 0.24.0 before 1.2.8 contains a symlink following vulnerability in porcelain.checkout(paths=[...]) that allows attackers to write arbitrary files by abusing raw os.open without O_NOFOLLOW. Attackers can craft a repository where a worktree symlink points to .git/hooks/post-checkout, so restoring the file from a tag writes a malicious hook for code execution.
CVSS:4.0/AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N
Produtos afetados
jelmer · dulwich
CVEs relacionadas — jelmer dulwich

No mesmo produto, das mais perigosas para as menos.

CVE-2026-114094HIGHDulwich before 1.2.9 Arbitrary File Write via DOS drive letter pathsEPSS 0.9%CVE-2026-42305HIGHDulwich has an arbitrary file write via NTFS-hostile tree entries on WindowsEPSS 0.6%CVE-2026-42563HIGHDulwich Vulnerable to Command Injection via Merge Driver PathEPSS 0.6%CVE-2026-52726HIGHDulwich's submodule path traversal in porcelain.submodule_update / porcelain.clone(recurse_submodules=True) yields RCE via attacker-dropped .git/hooks payloadEPSS 0.4%CVE-2026-114095HIGHDulwich before 1.2.9 Infinite Loop DoS via Pack.resolve_objectEPSS 0.3%CVE-2026-47734MEDIUMDulwich has unbounded memory allocation in receive-pack from crafted thin packsEPSS 0.2%