CVE-2026-100419
gitoxide gix-fs before 0.23.0 Worktree Escape via Symlink
CVSS Score
7.0
EPSS Score
0.0%
EPSS Percentile
0th
gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in the worktree checkout mechanism that allows attackers to escape the worktree directory via symlink manipulation. During forced checkout with overwrite_existing enabled, attackers can craft malicious repository trees where symlink entries replace validated directories, causing subsequent files to be written outside the worktree through the symlink for code execution or file manipulation.
| CWE | CWE-59 |
| Vendor | gitoxidelabs |
| Product | gitoxide |
| Published | Sep 25, 2026 |
Stay Ahead of the Next One
Get instant alerts for gitoxidelabs gitoxide
Be the first to know when new high vulnerabilities affecting gitoxidelabs gitoxide are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H Attack Vector
Local
Attack Complexity
High
Privileges Required
None
User Interaction
Required
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
GitoxideLabs / gitoxide
0 < 0.23.0
References
github.com: https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-6p9q-f2xg-6pr5 github.com: https://github.com/GitoxideLabs/gitoxide/commit/b62498378b8bc2c95863a044b700f2063b0b5875 github.com: https://github.com/GitoxideLabs/gitoxide/blob/gix-fs-v0.22.1/gix-fs/src/stack.rs#L185-L196 github.com: https://github.com/GitoxideLabs/gitoxide/security/advisories/GHSA-f89h-2fjh-2r9q github.com: https://github.com/GitoxideLabs/gitoxide vulncheck.com: https://www.vulncheck.com/advisories/gitoxide-gix-fs-before-0.23.0-worktree-escape-via-symlink
Credits
euriconicacio