Threats tagged 'brew-tach-cve-2026-78676'

1 threat

Threats tagged 'brew-tach-cve-2026-78676'
Severity	CVSS	Signals	Threat	Source	Published	Score and star
Critical	9.3	EPSS 0.8%	CVE-2026-78676kimi-cli · Kimi cli: GitPython: Dormant multi-line git-config values are corrupted into live injected directives (e.g. core.hooksPath) on any unrelated GitConfigParser write, enabling RCE (CVE-2026-78676) Critical9.3EPSS 0.8%2026-09-04GCVE DatabaseCVE-2026-78676 A critical vulnerability (CVE-2026-78676) in GitPython's GitConfigParser allows dormant multi-line git-config values to be corrupted into live injected directives upon any unrelated config write. This occurs because the parser's re-serialization logic mishandles multi-line values, causing injected directives like core.hooksPath to be interpreted by Git, enabling remote code execution (RCE). The issue affects GitPython version 3.1.58 at HEAD and specific kimi-cli versions. A patch is available. EPSS 0.8%Report on CVE-2026-78676 Vulnerability #brew-snowflake-cli-cve-2026-78676 #homebrew #brew-tach-cve-2026-78676	GCVE Database	2026-09-04

Showing 1–1 of 1 result