ALPINE-CVE-2026-113408: Path Traversal
Published Nov 12, 2026
·Updated
Path traversal in Git allows writing to arbitrary file via cloning and committing to bad repository
Affected Software
2 affected componentsFixes available
alpine/git<2.52.1-r0
2.52.1-r0
alpine/git<2.54.1-r0
2.54.1-r0
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
alpine/gitto a version that resolves this vulnerability.Fixed in 2.52.1-r0 - Upgrade
Upgrade
alpine/gitto a version that resolves this vulnerability.Fixed in 2.54.1-r0
Event History
Nov 12, 2026
CVE Published
via OSV·07:16 AM
Data Sourced
via OSV·07:16 AM
DescriptionSeverityAffected Software
Frequently Asked Questions
1
What access or interaction is required for exploitation?
The attack vector is local and requires user interaction. No privileges are required according to the supplied severity vector.
2
What is the potential impact if exploitation succeeds?
An attacker could write to an arbitrary file through cloning and committing to a malicious repository. The stated impact is limited to integrity; no confidentiality or availability impact is indicated.