CVE-2026-53584— libgit2: Submodule path traversal
Get alerts for future matching vulnerabilitiesLog in to subscribe
I. Basic Information for CVE-2026-53584
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗ Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
libgit2: Submodule path traversal
Source: CVE Program / CVE List V5
Vulnerability Description
libgit2 is a portable C implementation of the Git core methods provided as a linkable library with a solid API, allowing to build Git functionality into your application. Prior to 1.8.6 and 1.9.5, libgit2 does not reject traversal components in a submodule path loaded from .gitmodules. The affected src/libgit2/submodule.c paths include git_submodule_lookup and git_submodule_add_setup. A crafted repository can specify a path such as ../escape-target, and applications that initialize the submodule can create directories outside the repository working tree. This issue is fixed in versions 1.8.6 and 1.9.5.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5
Affected Products
II. Public POCs for CVE-2026-53584
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POCPremium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-53584
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-53584 (4)
Vendor Advisories for CVE-2026-53584 (1)
- 🔗 Submodule path traversal · Advisory · libgit2/libgit2 · GitHubx_refsource_CONFIRM
Vendor Pages for CVE-2026-53584 (1)
Same Patch Batch · libgit2 · 2026-08-20 · 5 CVEs total
| CVE-2026-53587 | 7.5 HIGH | libgit2 - Unauthenticated network-reachable heap out-of-bounds read in transports/smart_pk |
| CVE-2026-53586 | 6.5 MEDIUM | libgit2: HTTP transport can leak credentials to an offsite redirect target |
| CVE-2026-53583 | 6.5 MEDIUM | libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Backend |
| CVE-2026-53585 | 5.3 MEDIUM | libgit2: Unbounded Memory Allocation via Delta Object Result-Size Header |
IV. Related Vulnerabilities
Same product: libgit2
- CVE-2026-53586
libgit2: HTTP transport can leak credentials to an offsite r - CVE-2026-53583
libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Ba - CVE-2026-53585
libgit2: Unbounded Memory Allocation via Delta Object Result - CVE-2026-53587
libgit2 - Unauthenticated network-reachable heap out-of-boun - CVE-2026-5917
libgit2 v0.27.0-v1.9.0 Shell Command Injection via ssh_libss
Same vendor: libgit2
- CVE-2026-53586
libgit2: HTTP transport can leak credentials to an offsite r - CVE-2026-53583
libgit2: Inverted IP SubjectAltName Comparison in OpenSSL Ba - CVE-2026-53585
libgit2: Unbounded Memory Allocation via Delta Object Result - CVE-2026-53587
libgit2 - Unauthenticated network-reachable heap out-of-boun - CVE-2026-5917
libgit2 v0.27.0-v1.9.0 Shell Command Injection via ssh_libss
Same weakness: CWE-22
- CVE-2026-60084
SiYuan before v3.7.4 Arbitrary File Deletion via removeTempl - CVE-2026-48105
Arc Enterprise cluster FSM applyRegisterFile accepts arbitra - CVE-2026-47735
Arc has an authenticated arbitrary local-file read via DuckD - CVE-2026-64679
Atlantis: Path Traversal in Atlantis Workspace Handling Allo - CVE-2026-44517
Buildah: Build breakout using malicious Containerfile and Gi
V. Comments for CVE-2026-53584
No comments yet