Skip to content
Git Patches Vulnerabilities Allowing Code Execution

Git Patches Vulnerabilities Allowing Code Execution

First seen 10 Nov 2026, 21:20 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 10, 2026 at 21:21 UTC
  • •Git released version 2.56.1 to fix six vulnerabilities, including a critical code execution flaw.
  • •CVE-2026-111760 allows attackers to execute code via malicious repositories during recursive clones.
  • •Users must update Git or apply patches to mitigate these vulnerabilities.

On November 10, 2026, the Git project released Git version 2.56.1 to address six security vulnerabilities, including CVE-2026-111760, which allows arbitrary code execution during recursive clones of malicious repositories. The flaw arises from an integer truncation issue that permits an attacker to replace a submodule's .git file with a symbolic link to malicious code. Other vulnerabilities addressed include path traversal issues and memory corruption risks, affecting various versions from 2.50.2 to 2.55.1. Users are urged to update their Git installations to the latest version or apply the relevant patches. GitHub has already implemented these fixes across its services, including GitHub.com and GitHub Enterprise Cloud. Git for Windows has not yet released an update based on version 2.56.1 as of the announcement date. Until patches are applied, users are advised to clone only from trusted sources and avoid recursive cloning of untrusted repositories.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 1h ago How this analysis works

Timeline

2026-11-10
Git version 2.56.1 released
The Git project released version 2.56.1 to address six security vulnerabilities, including CVE-2026-111760.
Github.Blog
2026-11-10
CVE-2026-111760 published
CVE-2026-111760 details a flaw that allows arbitrary code execution during recursive clones of malicious repositories.
Thehackernews

More articles in this cluster (6)

Following this threat?

Track CVE-2026-105437 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (18)

1 / 3

Common questions

Which versions of Git are affected?
Versions 2.50.2 to 2.56.1 are affected, with specific patches available for earlier versions.
What should I do if I use Git?
Update to Git version 2.56.1 or apply the relevant patches for your current version to mitigate the vulnerabilities.
Is there evidence of exploitation?
No evidence of active exploitation has been reported; the vulnerabilities have been disclosed and patched.