Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
· thehackernews.com · popularity 21/100 · 0 similar stories today · Computing & Software Development (Technology & Consumer Electronics)
Read the original at thehackernews.com →
Summary
A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with matching fixes for the 2.50 through 2.55 series in 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1 and 2.55.1. The flaw, tracked as CVE-2026-111760, is an integer truncation in how Git handles its index. An
Found in: The Hacker News. Rating basis: single outlet; outlet tier 2 (unlisted); 1 feeds; feed position 1.