CVE-2026-100419— gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink
Quick assessment
Affected
GitoxideLabs gitoxide
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
gitoxide 的 gix-fs 组件在 0.23.0 版本之前存在一个路径验证绕过漏洞，该漏洞位于工作树检出机制中，攻击者可利用符号链接操纵突破工作树目录的限制。在启用 overwrite_existing 选项的强制检出动操作中，攻击者可以构造恶意的仓库树结构，其中符号链接条目会替换经过验证的目录，导致后续文件通过符号链接被写入到工作树之外，从而可能实现代码执行或文件操纵。
Possible ATT&CK Techniques 2 AI
T1059 · Command and Scripting Interpreter T1564.004 · NTFS File AttributesAffected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| GitoxideLabs | gitoxide | < 0.23.0 |
affected |
0.23.0 |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-100419
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink
Source: CVE Program / CVE List V5
Vulnerability Description
gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwrite_existing enabled, attackers can craft malicious repository trees where symlink entries replace validated directories, causing subsequent files to be written outside the worktree through the symlink for code execution or file manipulation.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
在文件访问前对链接解析不恰当(链接跟随)
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| GitoxideLabs | gitoxide | 0 ~ 0.23.0 | - |
|
II. Public POCs for CVE-2026-100419
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-100419
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-100419 (1)
Vendor Advisories for CVE-2026-100419 (3)
-
-
-
🔗 gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink | Advisories | VulnCheck third-party-advisory
IV. Related Vulnerabilities
Same product: gitoxide
-
CVE-2026-91986
gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection -
CVE-2025-24890
gix-sec safe.directory protections absent for elevated admin -
CVE-2026-82255
gitoxide 0.25.4 HTTP Credential Leak via Redirect -
CVE-2026-82253
gitoxide before 0.82.0 Path Traversal via Submodule Name Val -
CVE-2026-82254
gitoxide before 0.69.0 Denial of Service via gix-pack
Same vendor: GitoxideLabs
-
CVE-2026-91986
gitoxide gix-transport before 0.59.2 CR/LF/NUL Injection -
CVE-2025-24890
gix-sec safe.directory protections absent for elevated admin -
CVE-2026-82255
gitoxide 0.25.4 HTTP Credential Leak via Redirect -
CVE-2026-82253
gitoxide before 0.82.0 Path Traversal via Submodule Name Val -
CVE-2026-82254
gitoxide before 0.69.0 Denial of Service via gix-pack
Same weakness: CWE-59
-
CVE-2026-81310
Linux图像扫描驱动存在链接跟随漏洞 -
CVE-2026-102242
Path Traversal via Symlink Following in allowedLocalRoots in -
CVE-2026-92371
Local Privilege Escalation via Improper Link Resolution in C -
CVE-2026-87798
LXD client recursive file pull allows directory escape via m -
CVE-2026-87799
Arbitrary file write on LXD host via symlink in migration st
V. Comments for CVE-2026-100419
No comments yet