A critical vulnerability in Git (CVE-2026-111760) enables malicious repositories to execute arbitrary code on a victim’s machine during recursive cloning of repositories and submodules, driven by an integer truncation flaw in index handling. Maintainers and administrators must upgrade immediately to the newly released patched versions, including Git 2.56.1 and corresponding backports.
READ THE ORIGINAL ARTICLE AT THEHACKERNEWS.COM →