What’s Vulnerable › Products

cli vulnerabilities

12 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 12 published in the last 12 months.

Check whether your cli version is affected

Latest cli vulnerabilities

• CVE-2026-72924 — GitHub CLI: `gh codespace ports forward` exposes forwarded services on all network interfaces by default (CVSS 2.1)
• CVE-2026-64655 — GitHub CLI: Attestation Verification Bypass via Unescaped Regex Metacharacters in SAN Matching (CVSS 2.1)
• CVE-2026-64654 — GitHub CLI: Terminal escape sequence injection in multiple `gh` commands (CVSS 5.3)
• CVE-2026-64653 — GitHub CLI: Unescaped variable components in request URLs could allow path traversal (CVSS 5.1)
• CVE-2026-64652 — GitHub CLI: Partial token disclosure in `gh auth status` output (CVSS 3.3)
• CVE-2026-59831 — GitHub CLI `gh codespace jupyter` could allow remote code execution when connecting to a malicious Codespace (CVSS 4.4)
• CVE-2026-48501 — GitHub CLI tokens leak via `gh attestation` commands (CVSS 9.1)
• CVE-2026-45803 — gh: GitHub Actions log output in `gh run view` allows terminal escape sequence injection (CVSS 3.5)
• CVE-2025-25204 — `gh attestation verify` returns incorrect exit code during verification if no attestations are present (CVSS 6.3)
• CVE-2024-54132 — GitHub CLI allows downloading malicious GitHub Actions workflow artifact to result in path traversal vulnerability (CVSS 6.3)
• CVE-2024-53858 — Recursive repository cloning can leak authentication tokens to non-GitHub submodule hosts in the gh cli (CVSS 6.5)
• CVE-2024-52308 — Connecting to a malicious Codespaces via GH CLI could allow command execution on the user's computer (CVSS 9.6)