Live › vulnerability › CVE-2026-114098
Go to dashboardDulwich, a pure-Python Git library, fails to block writes outside the worktree during stash pop when intermediate directories are symlinks. A malicious repository can plant a payload in .git/hooks/post-checkout, which runs code on the next checkout.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Any application or tool that uses Dulwich to pop stashes or check out repositories it did not create, such as Git hosting helpers, CI scripts, or automation that clones third-party code. Projects that only use Dulwich on repositories they fully control, and never call stash pop on untrusted input, are much less exposed.
No product ranges from the sources yet.
pip show dulwich (or pip index versions dulwich) and confirm the installed version is below 1.2.8dulwich pinned to a version from 0.22.5 up to 1.2.81.2.8 or laterEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Dulwich from 0.22.5 before 1.2.8 contains a path traversal vulnerability in stash.py pop() that allows attackers to write arbitrary files outside the worktree through intermediate directory symlinks. Attackers can craft a malicious repository whose popped stash writes a payload into .git/hooks/post-checkout, achieving code execution on the next checkout.
This page as .md · .json · in your agent: get_signal("CVE-2026-114098")
NVD data is provided by NIST and is public domain · EPSS scores by FIRST, used with attribution. Posts quoted belong to their authors.