CVE-2026-104608

A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld).

A remote code execution vulnerability was identified in GitHub Enterprise Server in the Git service (babeld). babeld held references into internal collections while calling into the SSH library, where a re-entrant callback could modify a collection and invalidate those references. An attacker with an account and SSH access to the instance could leverage this use-after-free into a controlled write and run arbitrary commands as babeld, including disclosure of its environment…

4. Nov 2026

Ausgewertete Quellen

• NVD
  CVE-2026-104608