Skip to content
Threat Feed

Product

Nautobot ( < 2.4.33)

1 brief RSS
high advisory

Nautobot GitRepository current_head Field Writable via REST API (CVE-2026-44798)

A user with permissions to modify GitRepository records can manipulate the `current_head` field via the REST API in Nautobot, leading to repository state desynchronization or unavailability; this is remediated in versions 2.4.33 and 3.1.2.

Nautobot +1 gitrepository rest-api privilege-escalation
2r 1t