Search: CVE-2026-71556

A vulnerability in the go-git library used by Red Hat OpenShift Virtualization v4.17 allows remote attackers to exploit symbolic link resolution during worktree operations. This flaw can lead to reading or writing arbitrary files outside the intended working directory when cloning and operating on a maliciously crafted repository. Red Hat rates this vulnerability as Important and assigns a high severity level. The issue is fixed in go-git versions 5.19.2 and 6.0.0-alpha.5 or later.