Path Traversal in Github Enterprise Server
CVE-2026-17556
A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and directories on the instance, including the entire user storage directory containing Git LFS ob…
Vulnerability class: Path Traversal (Directory Traversal)
Affected products
- Github Enterprise Server — versions 3.17.0, 3.18.0, 3.19.0
Weakness classification (CWE)
References
- product-cna@github.com (release-notes)
- product-cna@github.com (release-notes)
- product-cna@github.com (release-notes)
- product-cna@github.com (release-notes)
- product-cna@github.com (release-notes)