CVE-2026-45261
Last modified
CVE-2026-45261 is a critical-severity vulnerability rated 9.3/10 on the CVSS scale. GitButler is a modern Git-based version control interface for AI-powered workflows. Prior to 0.19.7, a emote code execution vulnerability exists in the Tauri-based GitButler desktop application. EPSS estimates a 0.52% chance of exploitation in the next 30 days.
Description
GitButler is a modern Git-based version control interface for AI-powered workflows. Prior to 0.19.7, a emote code execution vulnerability exists in the Tauri-based GitButler desktop application. An attacker can inject a malicious link in a pull request body, which if clicked by the user allows for arbitrary script execution in the Tauri webview. Users that have not enabled forge integration are not at risk. This vulnerability is fixed in 0.19.7.
Metrics
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Weakness Enumeration
References
Timeline
- Published
- Last Modified
- Status
- Deferred
Frequently Asked Questions
What is CVE-2026-45261?
How severe is CVE-2026-45261?
How do I fix CVE-2026-45261?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2026
- CVE-2026-45256When used to deliver a signal to a specific thread, thr_kill…5.5
- CVE-2026-45257The KTLS receive path decrypted each record in place, assumi…7.8
- CVE-2026-45258dsp_mmap_single() validated the requested mapping by checkin…7.8
- CVE-2026-45259sigqueue(2) was marked as permitted in capability mode with …6.5
- CVE-2026-4526In EmberZNet v9.0.2 and earlier, malformed global ZCL messag…6.5
- CVE-2026-45260Pimcore is an Open Source Data & Experience Management Platf…8.1
- CVE-2026-45264Nextcloud is an open source content collaboration platform. …4.3
- CVE-2026-45266Nextcloud is an open source content collaboration platform. …3.5
- CVE-2026-45267Nextcloud is an open source content collaboration platform. …6.5
- CVE-2026-4527GitLab has remediated an issue in GitLab CE/EE affecting all…6.5
- CVE-2026-45270CI4MS is a CodeIgniter 4-based content management system ske…8.7
- CVE-2026-45275Nextcloud is an open source content collaboration platform. …6.5
Are you affected by CVE-2026-45261?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST