lachhab-anas/exploit_cve-2026-3854Exploit for CVE-2026-3854, a remote code execution vulnerability in GitHub Enterprise Server, triggered via crafted git push options. Includes vulnerable version details and detection guidance.
CVE-2026-3854 is a Remote Code Execution in GitHub.com and GitHub Enterprise Server
The vulnerability could be exploited by injecting commands into the git push command as follows :
git push -o '<injected fields>' origin master
To review any exploitation of this vulnerability, we recommend that you review /var/log/github-audit.log for push operations containing ";" in push options.
Vulnerable Versions : GitHub Enterprise Server <= 3.19.1
Fixed Version : 3.14.24, 3.15.19, 3.16.15, 3.17.12, 3.18.6 and 3.19.3