CVE-2026-110767: Gitingest through 0.3.1 Arbitrary File Read via Symlink in Blob Ingestion
Published Oct 14, 2026
·Updated
Gitingest through 0.3.1 contains a symlink following vulnerability in ingestquery single-file blob ingestion that allows unauthenticated attackers to read server files by submitting symlink blob URLs. Attackers can commit a symlink to a public repository and submit its blob URL, causing the server to return any file the service user can read, up to 10 MB.
Affected Software
1 affected component
gitingest gitingest<=0.3.1
Event History
Oct 14, 2026
CVE Published
via MITRE·06:47 PM
Data Sourced
via MITRE·06:47 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
Does an attacker need an account on the affected service?
No. The issue can be exploited by unauthenticated attackers.
2
What does an attacker need to provide to trigger the file read?
The attacker must be able to commit a symlink to a public repository and submit the symlink's blob URL to the affected single-file blob ingestion functionality.
3
What files could be exposed?
The service may return any file readable by the account running the service. Returned content is limited to 10 MB.