Git Patches Flaw That Lets Malicious Repositories Execute Code During Recursive Clones
GlobeAlert Desk · curated from The Hacker News · global
A flaw in Git can let a malicious repository run an attacker's code on a computer that clones it recursively, together with its submodules. The Git project fixed it this week in Git 2.56.1, with matching fixes for the 2.50 through 2.55 series in 2.50.2, 2.51.3, 2.52.1, 2.53.1, 2.54.1 and 2.55.1. The flaw, tracked as CVE-2026-111760, is an integer truncation in how Git handles its index. An
GlobeAlert aggregates and classifies open sources; the story above belongs to its publisher. Summaries are machine-generated from the source text. How we score stories.
What the desk knows about this story
Scored from severity, scale, escalation potential and source agreement. Below the alert threshold.
Single-source so far. Treat details as unconfirmed until more publishers report.
Not flagged as developing.