CVE-2026-17556 | GitHub Enterprise Server up to 3.21.3 X-GitHub-Request-Id path traversal

A vulnerability classified as critical was found in GitHub Enterprise Server up to 3.17.18/3.18.12/3.19.9/3.20.5/3.21.3. This vulnerability affects unknown code. The manipulation of the argument X-GitHub-Request-Id results in path traversal.

This vulnerability is known as CVE-2026-17556. It is possible to launch the attack remotely. No exploit is available.

Upgrading the affected component is advised.VulDB Recent EntriesRead More