Threats tagged 'brew-tach-cve-2026-67326'

1 threat

Threats tagged 'brew-tach-cve-2026-67326'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
High	7.3	EPSS 0.3%	CVE-2026-67326kimi-cli · Kimi cli: GitPython: Newline injection in config_writer() section parameter bypasses CVE-2026-42215 patch, enabling RCE via core.hooksPath (CVE-2026-67326) High7.3EPSS 0.3%2026-08-13GCVE DatabaseCVE-2026-67326 Kimi CLI's GitPython integration contains a vulnerability (CVE-2026-67326) where newline injection in the config_writer() section parameter bypasses prior patch CVE-2026-42215. This allows an attacker controlling the section argument to inject newlines into .git/config, creating forged sections such as [core] with a malicious hooksPath. This leads to remote code execution (RCE) when git hooks are triggered. The vulnerability affects multiple version ranges of kimi-cli. A patch is available. EPSS 0.3%Report on CVE-2026-67326 Vulnerability #brew-snowflake-cli-cve-2026-67326 #homebrew #brew-tach-cve-2026-67326	GCVE Database	2026-08-13

Showing 1–1 of 1 result