GitHub CVE-2026-3854 Allows Remote Code Execution via Push Metadata Injection
ID: 793263a7-7411-5f29-9624-1384827cfa9e
STIX ID: report--793263a7-7411-5f29-9624-1384827cfa9e
Feed Name: ThreatCluster
Threat Score
The provided markdown excerpts report on CVE-2026-3854, a high-severity vulnerability in GitHub Enterprise Server's git push pipeline where push metadata can be injected to achieve remote code execution; multiple open-source articles (Seqrite, Malware News) covered the issue.
Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.