Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push

3 hours ago [email protected] (The Hacker News)

Cybersecurity researchers have disclosed details of a critical security vulnerability impacting GitHub.com and GitHub Enterprise Server that could allow an authenticated user to obtain remote code execution with a single “git push” command.
The flaw, tracked as CVE-2026-3854 (CVSS score: 8.7), is a case of command injection that could allow an attacker with push access to a repository to achieve

The post “Researchers Discover Critical GitHub CVE-2026-3854 RCE Flaw Exploitable via Single Git Push” appeared first on The Hacker News

Source:The Hacker News – [email protected] (The Hacker News)