Securing GitHub: Wiz Research uncovers Remote Code Execution in GitHub.com and GitHub Enterprise Server (CVE-2026-3854)

T1Covered by 1 source · first reported by Wiz Research at 28 Apr, 15:30 UTC

Details on CVE-2026-3854: A critical flaw in GitHub’s internal git infrastructure enabling RCE on GitHub.com and GitHub Enterprise Server.

security

Sources

• T1Securing GitHub: Wiz Research uncovers Remote Code Execution in GitHub.com and GitHub Enterprise Server (CVE-2026-3854)Wiz Research28 Apr, 15:30

Vulnerabilities

• CVE-2026-3854