CVE-2026-100407 | git-for-windows Git 2.53.0(2) wincred git-credential-wincred.c store password/oauth_refresh_token buffer overflow

A vulnerability, which was classified as problematic, has been found in git-for-windows Git 2.53.0(2). This affects the function store of the file contrib/credential/wincred/git-credential-wincred.c of the component wincred. Performing a manipulation of the argument password/oauth_refresh_token results in buffer overflow.

This vulnerability was named CVE-2026-100407. The attack needs to be approached locally. There is no available exploit.

It is advisable to upgrade the affected component.VulDB Recent EntriesRead More