Critical · published May 30, 2025
⚠️ A crafty GitHub Enterprise Server can trick your system into executing arbitrary commands! This sneaky flaw has been lurking in go-gh versions before 2.12.1. 🔍 Think of it like a delivery person who decides to drop off a package at your house by slipping in a fake address — what you thought was just a harmless delivery could become a home invasion! An attacker could manipulate HTTP URLs to point to local file paths, potentially executing arbitrary code on your machine. While it sounds alarming, this vulnerability is lower on the severity scale (CVSS 2.6), meaning it’s not actively being exploited but could be dangerous if encountered. Best to stay ahead of it!
Think of it like a delivery person who decides to drop off a package at your house by slipping in a fake address — what you thought was just a harmless delivery could become a home invasion! This vulnerability in go-gh allows an attacker-controlled GitHub Enterprise Server to replace HTTP URLs with local file paths, enabling the execution of arbitrary commands on the user's machine due to mismanaged file browsing in `Browser.Browse()`.
An attacker could manipulate HTTP URLs to point to local file paths, potentially executing arbitrary code on your machine. While it sounds alarming, this vulnerability is lower on the severity scale (CVSS 2.6), meaning it’s not actively being exploited but could be dangerous if encountered. Best to stay ahead of it! To protect yourself, upgrade to version 2.12.1 or later of go-gh, as this patch enhances the browsing functionality, preventing unauthorized file access. No workarounds are available, so updating is your best bet! You've got this! Upgrade your go-gh version and secure your system like a pro! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| cli/go-gh | < 2.12.1 | 2.12.1 |