CVE-2026-114466 :: Enginsight Vulnerability Database

Provider	Type	Base Score	Atk. Vector	Atk. Complexity	Priv. Required	Vector
GitLab	CNA	4.4 MEDIUM	LOCAL	LOW	NONE	CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N

Base Score

CVSS 3.x

EPSS Score

Percentile: Unknown

Early Detection

Affected products identified ahead of NVD analysis through intelligence sources (CNA/ADP records, vendor advisories, Enginsight analysis).

Vendor	Product	Version	Source
git	git	2.50.1	CNA
git	git	2.51.2	CNA
git	git	2.52.0	CNA
git	git	2.53.0	CNA
git	git	2.54.0	CNA
git	git	2.55.0	CNA
git	git	2.56.0	CNA

Debian Releases

Debian Product

Codename

git

bookworm	vulnerable
bookworm (security)	vulnerable
forky	vulnerable
sid	vulnerable
trixie	vulnerable

Amazon Linux Releases

Amazon Package

Release

git

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

git-all

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

git-core

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

git-core-debuginfo

Amazon Linux 2023

0:2.50.1-1.amzn2023.0.2

fixed

git-core-doc

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

git-credential-libsecret

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

git-credential-libsecret-debuginfo

Amazon Linux 2023

0:2.50.1-1.amzn2023.0.2

fixed

git-cvs

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

git-daemon

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

git-daemon-debuginfo

Amazon Linux 2023

0:2.50.1-1.amzn2023.0.2

fixed

git-debuginfo

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

git-debugsource

Amazon Linux 2023

0:2.50.1-1.amzn2023.0.2

fixed

git-email

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

git-gui

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

git-instaweb

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

git-p4

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

git-subtree

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

git-svn

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

gitk

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

gitweb

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

perl-Git

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

perl-Git-SVN

Amazon Linux 2	0:2.47.3-1.amzn2.0.2 fixed
Amazon Linux 2023	0:2.50.1-1.amzn2023.0.2 fixed

Common Weakness Enumeration

CWE-1220 - Insufficient Granularity of Access Control
The product implements access controls via a policy or other feature with the intention to disable or restrict accesses (reads and/or writes) to assets in a system from untrusted agents. However, implemented access controls lack required granularity, which renders the control policy too broad because it allows accesses from unauthorized agents to the security-sensitive assets.

Vulnerability Media Exposure

References

https://gitlab.com/gitlab-org/git/-/work_items/812