Path Traversal in Github Enterprise Server

CVE-2026-17556

A path traversal vulnerability was identified in GitHub Enterprise Server that allowed an unauthenticated attacker to delete arbitrary files and directories on the instance, including the entire user storage directory containing Git LFS ob…

Vulnerability class: Path Traversal (Directory Traversal)

Affected products

Weakness classification (CWE)

References