> TritonInfoSec News
Home / Nov 11, 2026 / Story
0
#10 The Hacker News general November 10, 2026 at 19:23 UTC

Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones

By [email protected] (The Hacker News)

AI Summary

A newly disclosed vulnerability in Git (CVE-2026-111760) allows a malicious repository to execute attacker-controlled code on a machine that recursively clones it with submodules, exploiting an integer truncation flaw in Git's index handling. Fixes are available in Git 2.56.1 and backported to versions 2.50.2 through 2.55.1. Any developer or CI/CD pipeline performing recursive git clones should update immediately, as this is a supply chain-relevant code execution risk.

Read full article → https://thehackernews.com/2026/11/git-patches-flaw…

Relevance score: 79.0/100

# More from November 11

  1. 1
    Microsoft November 2026 Patch Tuesday fixes 1,235 flaws, Outlook zero-day BleepingComputer
  2. 2
    France Blames Iran for Sabotage Attack on Refrigeration Controllers at About 700 Retail Sites The Hacker News
  3. 3
    N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits The Hacker News
  4. 4
    Russian Turla Hackers Use New Cereal Malware to Steal Emails From Government Exchange Servers The Hacker News
  5. 5
    New OpenSSH Vulnerability Schneier on Security
  6. 6
    SAP Patches Four CVSS 10.0 Flaws, Including Two Enabling Remote Code Execution The Hacker News
  7. 7
    Hackers Exploit Critical Xen Orchestra Auth Bypass Flaw to Gain Admin Access The Hacker News
  8. 8
    Google Issues Chrome Security Update for Eighth Actively Exploited Zero-Day of 2026 The Hacker News
  9. 9
    Japanese furniture giant Nitori says hackers stole 37.6M customer records BleepingComputer