SB2020111152 - Untrusted search path in GitHub CLI

Description

This security bulletin contains information about 1 vulnerability.

1) Untrusted search path (CVE-ID: N/A)

CWE-ID: CWE-426 - Untrusted Search Path

CVSSv4: CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:U/U:Green

The vulnerability allows a local user to execute arbitrary code.

The vulnerability exists due to improper search path control in git executable resolution when invoking git from the current working directory on Windows. A local user can place a malicious git.exe or git.bat in the current directory to execute arbitrary code.

Only Windows users who run gh inside untrusted directories are affected.

Remediation

Install update from vendor's website.

References

• https://github.com/cli/cli/security/advisories/GHSA-fqfh-778m-2v32
• https://github.com/golang/go/issues/38736