CVE-2026-52726

Name of the Vulnerable Software and Affected Versions Dulwich (affected versions not specified)

Description A path traversal flaw exists in the Dulwich Python library for Git repositories due to incorrect restriction of directory path names. This issue allows a remote attacker to bypass standard protections and gain unauthorized access to protected information. In real-world incidents, this flaw has been exploited to achieve Remote Code Execution (RCE) by dropping malicious payloads into the .git/hooks directory via submodules.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.