CVE-2026-100407

Git for Windows is the Windows port of Git. From 2.44.0.windows.1 until 2.55.0.windows.3, the git-credential-wincred store operation in contrib/credential/wincred/git-credential-wincred.c uses _scwprintf() to size a formatted wide-character credential buffer without space for the terminating NUL when both password and oauth_refresh_token are present. The operation also passes a byte count to _snwprintf_s() where a wide-character count is required, allowing the terminator to be written one WCHAR past the heap allocation before CredWriteW() persists the credential. The resulting fixed two-byte NUL overwrite can terminate the helper with Windows heap-corruption status and can cause git credential approve to report success even though the OAuth credential was not stored. This issue is fixed in version 2.55.0.windows.3.

• CWE-787

• https://github.com/git-for-windows/git/commit/52ca1113d651127f89477a8763f86ab20f645e1d
• https://github.com/git-for-windows/git/releases/tag/v2.55.0.windows.3
• https://github.com/git-for-windows/git/security/advisories/GHSA-v3h4-vrpr-rh9x

Published

Nov 4, 2026

Last Modified

Nov 5, 2026

Status

Received

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-100392InvoicePlane is a self-hosted open source application for ma…7
• CVE-2026-100394Nezha Monitoring is a self-hostable, lightweight, servers an…6.5
• CVE-2026-100395LXC is a userspace interface for the Linux kernel containmen…6.8
• CVE-2026-1004The Essential Addons for Elementor plugin for WordPress is v…5.3
• CVE-2026-100404Zulip is an open-source team collaboration tool. In Zulip Se…6.5
• CVE-2026-100406dbt enables data analysts and engineers to transform their d…8.2
• CVE-2026-100408Git for Windows is the Windows port of Git. From 2.43.0.wind…4.4
• CVE-2026-100409OpenNext Cloudflare is an open Next.js adapter for Cloudflar…7.5
• CVE-2026-10041The WCFM – Frontend Manager for WooCommerce plugin for WordP…4.3
• CVE-2026-100413SeaweedFS is a distributed storage system for files and blob…7.1
• CVE-2026-100417RustDesk before 1.5.0 on Windows fails to enforce the one-wa…3.1
• CVE-2026-100418Flame through 2.4.0 contains an information exposure vulnera…5.3