{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-64653", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2026-07-20T17:11:30.896Z", "datePublished": "2026-08-06T17:51:54.344Z", "dateUpdated": "2026-08-07T14:54:13.120Z"}, "containers": {"cna": {"title": "GitHub CLI: Unescaped variable components in request URLs could allow path traversal", "problemTypes": [{"descriptions": [{"cweId": "CWE-22", "lang": "en", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "NETWORK", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "subAvailabilityImpact": "NONE", "baseScore": 5.1, "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N", "version": "4.0"}}], "references": [{"name": "https://github.com/cli/cli/security/advisories/GHSA-4fjg-2h4q-fwg3", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/cli/cli/security/advisories/GHSA-4fjg-2h4q-fwg3"}, {"name": "https://github.com/cli/cli/commit/0c2eea6338a2323cfff000160b9b5a56a38d2a06", "tags": ["x_refsource_MISC"], "url": "https://github.com/cli/cli/commit/0c2eea6338a2323cfff000160b9b5a56a38d2a06"}, {"name": "https://github.com/cli/cli/releases/tag/v2.97.0", "tags": ["x_refsource_MISC"], "url": "https://github.com/cli/cli/releases/tag/v2.97.0"}], "affected": [{"vendor": "cli", "product": "cli", "versions": [{"version": "< 2.97.0", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-06T17:51:54.344Z"}, "descriptions": [{"lang": "en", "value": "GitHub CLI (gh) is GitHub\u2019s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resource than the user intended. This issue is fixed in version 2.97.0."}], "source": {"advisory": "GHSA-4fjg-2h4q-fwg3", "discovery": "UNKNOWN"}}, "adp": [{"metrics": [{"other": {"type": "ssvc", "content": {"timestamp": "2026-08-07T14:54:02.803787Z", "id": "CVE-2026-64653", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "role": "CISA Coordinator", "version": "2.0.3"}}}], "title": "CISA ADP Vulnrichment", "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-07T14:54:13.120Z"}}]}}

{"dataType": "CVE_RECORD", "containers": {"adp": [{"title": "CISA ADP Vulnrichment", "metrics": [{"other": {"type": "ssvc", "content": {"id": "CVE-2026-64653", "role": "CISA Coordinator", "options": [{"Exploitation": "none"}, {"Automatable": "no"}, {"Technical Impact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-07T14:54:02.803787Z"}}}], "providerMetadata": {"orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "shortName": "CISA-ADP", "dateUpdated": "2026-08-07T14:54:07.290Z"}}], "cna": {"title": "GitHub CLI: Unescaped variable components in request URLs could allow path traversal", "source": {"advisory": "GHSA-4fjg-2h4q-fwg3", "discovery": "UNKNOWN"}, "metrics": [{"cvssV4_0": {"version": "4.0", "baseScore": 5.1, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N", "userInteraction": "ACTIVE", "attackComplexity": "LOW", "attackRequirements": "NONE", "privilegesRequired": "NONE", "subIntegrityImpact": "LOW", "vulnIntegrityImpact": "NONE", "subAvailabilityImpact": "NONE", "vulnAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "vulnConfidentialityImpact": "NONE"}}], "affected": [{"vendor": "cli", "product": "cli", "versions": [{"status": "affected", "version": "< 2.97.0"}]}], "references": [{"url": "https://github.com/cli/cli/security/advisories/GHSA-4fjg-2h4q-fwg3", "name": "https://github.com/cli/cli/security/advisories/GHSA-4fjg-2h4q-fwg3", "tags": ["x_refsource_CONFIRM"]}, {"url": "https://github.com/cli/cli/commit/0c2eea6338a2323cfff000160b9b5a56a38d2a06", "name": "https://github.com/cli/cli/commit/0c2eea6338a2323cfff000160b9b5a56a38d2a06", "tags": ["x_refsource_MISC"]}, {"url": "https://github.com/cli/cli/releases/tag/v2.97.0", "name": "https://github.com/cli/cli/releases/tag/v2.97.0", "tags": ["x_refsource_MISC"]}], "descriptions": [{"lang": "en", "value": "GitHub CLI (gh) is GitHub\u2019s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resource than the user intended. This issue is fixed in version 2.97.0."}], "problemTypes": [{"descriptions": [{"lang": "en", "type": "CWE", "cweId": "CWE-22", "description": "CWE-22: Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2026-08-06T17:51:54.344Z"}}}, "cveMetadata": {"cveId": "CVE-2026-64653", "state": "PUBLISHED", "dateUpdated": "2026-08-07T14:54:13.120Z", "dateReserved": "2026-07-20T17:11:30.896Z", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "datePublished": "2026-08-06T17:51:54.344Z", "assignerShortName": "GitHub_M"}, "dataVersion": "5.2"}

{"affected": [{"affectedData": [{"product": "cli", "vendor": "cli", "versions": [{"status": "affected", "version": "< 2.97.0"}]}], "source": "[email protected]"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "GitHub CLI (gh) is GitHub\u2019s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resource than the user intended. This issue is fixed in version 2.97.0."}], "id": "CVE-2026-64653", "lastModified": "2026-08-07T15:17:02.877", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "NONE", "attackVector": "NETWORK", "availabilityRequirement": "NOT_DEFINED", "baseScore": 5.1, "baseSeverity": "MEDIUM", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "NONE", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "NONE", "subConfidentialityImpact": "LOW", "subIntegrityImpact": "LOW", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "NONE", "vulnConfidentialityImpact": "NONE", "vulnIntegrityImpact": "NONE", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "[email protected]", "type": "Secondary"}], "ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-64653", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "role": "CISA Coordinator", "timestamp": "2026-08-07T14:54:02.803787Z", "version": "2.0.3"}}]}, "published": "2026-08-06T22:18:13.237", "references": [{"source": "[email protected]", "url": "https://github.com/cli/cli/commit/0c2eea6338a2323cfff000160b9b5a56a38d2a06"}, {"source": "[email protected]", "url": "https://github.com/cli/cli/releases/tag/v2.97.0"}, {"source": "[email protected]", "url": "https://github.com/cli/cli/security/advisories/GHSA-4fjg-2h4q-fwg3"}], "sourceIdentifier": "[email protected]", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-22"}], "source": "[email protected]", "type": "Secondary"}]}

{"bugzilla": {"description": "github.com/cli/cli: GitHub CLI: Path traversal via unescaped URL variables", "id": "2512320", "url": "https://bugzilla.redhat.com/show_bug.cgi?id=2512320"}, "csaw": false, "cvss3": {"cvss3_base_score": "5.4", "cvss3_scoring_vector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:N", "status": "draft"}, "cwe": "CWE-22", "details": ["GitHub CLI (gh) is GitHub\u2019s official command line tool. Prior to 2.97.0, some HTTP request URLs interpolate variable path components without percent encoding, allowing URL path metacharacters in attacker-controlled repository or resource values to make gh address a different API endpoint or resource than the user intended. This issue is fixed in version 2.97.0.", "A flaw was found in GitHub CLI. This vulnerability arises from the tool's failure to properly percent-encode variable path components in HTTP request URLs. An attacker could craft malicious repository or resource values containing URL path metacharacters. This could lead to the GitHub CLI addressing a different API endpoint or resource than intended, potentially resulting in unintended actions or information exposure."], "mitigation": {"lang": "en:us", "value": "- Upgrade `gh` to version 2.97.0 or later.\n- Be cautious when running `gh` against untrusted repositories or inputs whose names you do not control."}, "name": "CVE-2026-64653", "package_state": [{"cpe": "cpe:/a:redhat:openshift_gitops:1", "fix_state": "Not affected", "package_name": "openshift-gitops-1/argocd-rhel8", "product_name": "Red Hat OpenShift GitOps"}, {"cpe": "cpe:/a:redhat:openshift_gitops:1", "fix_state": "Not affected", "package_name": "openshift-gitops-1/argocd-rhel9", "product_name": "Red Hat OpenShift GitOps"}, {"cpe": "cpe:/a:redhat:openstack:18.0", "fix_state": "Not affected", "package_name": "rhoso-operators/openstack-operator-bundle", "product_name": "Red Hat OpenStack Platform 18.0"}], "public_date": "2026-08-06T17:51:54Z", "references": ["https://www.cve.org/CVERecord?id=CVE-2026-64653\nhttps://nvd.nist.gov/vuln/detail/CVE-2026-64653\nhttps://github.com/cli/cli/commit/0c2eea6338a2323cfff000160b9b5a56a38d2a06\nhttps://github.com/cli/cli/releases/tag/v2.97.0\nhttps://github.com/cli/cli/security/advisories/GHSA-4fjg-2h4q-fwg3"], "statement": "A flaw was found in GitHub CLI (gh). The tool fails to properly percent-encode variable path components in HTTP request URLs, allowing URL path metacharacters in attacker-controlled repository or resource values to redirect the CLI to a different API endpoint than intended. This could result in unintended actions or information exposure. Red Hat products that include github.com/cli/cli as a transitive Go dependency (OpenShift GitOps, OpenStack Platform) are not affected because the vulnerable CLI code path is not invoked.", "threat_severity": "Moderate"}

{"affected": [{"configurations": [{"platform": null, "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.97.0)"}}], "enrichment": {"confidence": 100.0, "confidence_source": "matching", "scores": [{"score": 100.0, "source": "matching"}]}, "original": {"product": "cli", "source": "cna", "vendor": "cli"}, "product": "cli", "vendor": "cli"}], "created": "2026-08-07T01:30:04.026546+00:00", "updated": "2026-08-07T01:45:05.157836+00:00", "vendors": ["cli", "cli$PRODUCT$cli"]}