gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwrite_existing enabled, attackers can craft malicious repository trees where symlink entries replace validated directories, causing subsequent files to be written outside the worktree through the symlink for code execution or file manipulation.
CVSS Details
- CVSS 4.0 Base Score: 7.3 (HIGH)
- CVSS 4.0 Vector: (CVSS:4.0/AV:L/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X)
- CVSS 3.1 Base Score: 7
- CVSS 3.1 Vector: (CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Amazon Linux Ami 2 | — | Upgrade rust-std-staticUpgrade rust-docUpgrade rust-toolset-srpm-macrosUpgrade rust-gdbUpgrade cargoUpgrade rust-toolsetUpgrade rust-debugger-commonUpgrade rust-analyzerUpgrade rustUpgrade clippyUpgrade rust-srcUpgrade rustfmt | Oct 19, 2026 | Oct 19, 2026 |
| Amazon_linux_2023 | — | Upgrade clippyUpgrade rust-srcUpgrade rustfmt-debuginfoUpgrade rust-std-static-wasm32-wasip1Upgrade cargoUpgrade clippy-debuginfoUpgrade rust-toolset-srpm-macrosUpgrade rust-gdbUpgrade rust-cargo-c-debugsourceUpgrade rust-docUpgrade rust-analyzerUpgrade cargo-debuginfoUpgrade rust-toolsetUpgrade rust-std-static-wasm32-unknown-unknownUpgrade cargo-cUpgrade rust-debuginfoUpgrade rustUpgrade rust-lldbUpgrade rust-analyzer-debuginfoUpgrade rustfmtUpgrade rust-std-staticUpgrade rust-debugsourceUpgrade cargo-c-debuginfoUpgrade rust-debugger-common | Oct 13, 2026 | Sep 25, 2026 |
| Redhat_linux | — | — | Sep 28, 2026 | Sep 25, 2026 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub