GitHub: Zounds, a genuinely helpful AI-assisted bug report that isn't total slop! Here, Wiz, take this wad of cash

Wiz researchers used AI-augmented reverse engineering to discover CVE-2026-3854, a high-severity flaw in GitHub's git infrastructure that allowed null-byte injection via git push options into internal X-Stat headers, potentially granting full read/write access to private repositories; GitHub patched the issue within six hours and reported no known exploitation on GitHub.com while advising GHES customers to inspect logs.