PT-2026-68766 · Github · Github Cli
CVE-2026-64655
·
Published
2026-08-06
·
Updated
2026-08-26
CVSS v4.0
2.1
Low
| Vector | AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:N/VA:N/SC:N/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X |
Name of the Vulnerable Software and Affected Versions
GitHub CLI (gh) versions prior to 2.97.0
Description
The
gh attestation verify command fails to escape regex metacharacters when building the certificate Subject Alternative Name matcher from the --signer-repo and --signer-workflow flag values. Consequently, user-supplied repository or workflow names are processed as regular expressions instead of literal strings. Since GitHub allows the . character in organization, repository, and workflow path names, and . acts as a regex wildcard, an attacker can use a lookalike name to satisfy a matcher intended for a different trusted signer. This allows the bypass of Sigstore attestation verification, potentially undermining supply chain verification for CI/CD pipelines or policy gates that rely on specific signing workflows.Recommendations
Update to version 2.97.0.
Exploit
Fix
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Github Cli