{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/tags/git-annex/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":[],"_cs_cves":[{"id":"CVE-2026-112818"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["git-annex (\u003c 10.20261026)"],"_cs_severities":["high"],"_cs_tags":["exfiltration","vulnerability","git-annex"],"_cs_type":"advisory","_cs_vendors":[],"content_html":"\u003cp\u003egit-annex versions prior to 10.20261026 are vulnerable to a cross-repository data exfiltration flaw, tracked as CVE-2026-112818. This vulnerability allows for unauthorized access or leakage of data between managed repositories. The maintainer has released a patched version and provided backported patches for previous releases to address the risk.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows for the unauthorized exfiltration of data across repositories managed by git-annex, potentially leading to the exposure of sensitive information stored in those environments.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade git-annex to version 10.20261026 or apply the available backported patches provided by the maintainer for older versions.\u003c/li\u003e\n\u003cli\u003eInventory systems utilizing git-annex to identify versions requiring the security update.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-27T21:53:40Z","date_published":"2026-10-27T21:53:40Z","id":"https://feed.craftedsignal.io/briefs/2026-10-git-annex-data-exfiltration/","summary":"A security vulnerability in git-annex (CVE-2026-112818) allows for unauthorized cross-repository data exfiltration, requiring an update to version 10.20261026 or the application of backported patches.","title":"git-annex: Cross-repository data exfiltration (CVE-2026-112818)","url":"https://feed.craftedsignal.io/briefs/2026-10-git-annex-data-exfiltration/"}],"language":"en","title":"CraftedSignal Threat Feed - Git-Annex","version":"https://jsonfeed.org/version/1.1"}