CVE-2026-53584 | libgit2 up to 1.8.5/1.9.4 Submodule src/libgit2/submodule.c git_submodule_lookup/git_submodule_add_setup path traversal

August 20, 2026 Yanac

A vulnerability labeled as problematic has been found in libgit2 up to 1.8.5/1.9.4. Affected by this vulnerability is the function git_submodule_lookup/git_submodule_add_setup of the file src/libgit2/submodule.c of the component Submodule. Executing a manipulation can lead to relative path traversal.

The identification of this vulnerability is CVE-2026-53584. The attack may be launched remotely. There is no exploit available.

The affected component should be upgraded.VulDB Recent EntriesRead More