CVE-2026-100408 | git-for-windows Git up to 2.55.0.windows.2 git-credential-wincred git-credential-wincred.c match_cred_password heap-based overflow

November 4, 2026 Yanac

A vulnerability has been found in git-for-windows Git up to 2.55.0.windows.2 and classified as problematic. This issue affects the function match_cred_password of the file contrib/credential/wincred/git-credential-wincred.c of the component git-credential-wincred. The manipulation leads to heap-based buffer overflow.

This vulnerability is referenced as CVE-2026-100408. The attack can only be performed from a local environment. No exploit is available.

The affected component should be upgraded.VulDB Recent EntriesRead More