CVE-2026-3854

CVE

Threat entity extracted from intelligence sources

Frequency

11

occurrences

First Seen

April 28, 2026

Last Seen

April 29, 2026

Exploited in Wild

—

Ransomware Use

—

Public Exploits

—

Attack Vector

—

Vulnerability Overview

Exploitation Activity

Exploitation Intelligence

GitHub Patches Critical RCE Vulnerability CVE-2026-385472.0

A critical remote code execution vulnerability, tracked as CVE-2026-3854, was discovered in GitHub's internal git infrastructure, allowing authenticated users to execute arbitrary commands via a crafted git push command. The flaw, identified by Wiz researchers using AI, affects both GitHub.com and G...

Public Exploits

Checking GitHub for proof-of-concept code…

Related Clusters (1)

GitHub Patches Critical RCE Vulnerability CVE-2026-3854

Apr 28·49 sources

Related Articles (11)

Wiz hands GitHub AI-aided bug report that isn't total slop

Theregister·Apr 29

GitHub Fixes RCE Flaw that Gave Access to Millions of Private Repos

Ground.News·Apr 29

GitHub: Woah, a genuinely helpful AI-assisted bug report that isn't total slop. Here, Wiz, take this wad of cash

Theregister·Apr 29

CVE-2026-3854

nvd.nist.gov·Apr 29

GitHub fixes RCE flaw that gave access to millions of private repos

Bleepingcomputer·Apr 29

1 / 3

Related Entities

Zero-day Exploit Data Breach Wiz CWE-78 - OS Command Injection CWE-22 - Path Traversal CWE-94 - Code Injection T1059 - Command and Scripting Interpreter T1190 - Exploit Public-Facing Application GitHub Enterprise Server GitHub.com GitHub GitHub Enterprise Cloud