CVE-2026-105295
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk2th percentile - higher than 2% of all known CVEs
Summary
GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. A network attacker presenting an invalid certificate once can intercept later automatic update checks, offer a fake version, and execute code as the user upon installation.
Risk Assessment
A network attacker can intercept update traffic and deliver a fake update, leading to remote code execution with user privileges. The risk includes full compromise of the workstation.
Recommendation
Upgrade GitAhead to a version newer than 2.7.1 that verifies update signatures and properly handles TLS errors, and enforce a policy requiring certificate verification.
Other vulnerabilities in GitAhead
See all- CVE-2026-106059High
GitAhead through version 2.7.1 on macOS contains a command injection vulnerability that allows attackers to execute shell commands by crafting repository filenames. Attackers can commit a file whose path contains a double quote and a payload, which runs when 'Show in Finder' is selected.
- CVE-2026-106058High
GitAhead through version 2.7.1 contains an OS command injection vulnerability in src/git/Filter.cpp that allows malicious repositories to execute commands by substituting crafted filenames into clean/smudge filter commands. Attackers can ship files named with $(command) selected via .gitattributes so checkout or staging runs the command through bash -c as the victim.
Original NVD description (English source)
GitAhead 2.5.0 through 2.7.1 contains an insecure update mechanism that installs downloaded updates without integrity or signature verification and permanently ignores TLS errors after one SSL error dialog. Network attackers presenting an invalid certificate once can intercept later automatic update checks, offer a fake version, and execute code as the user upon installation.
Vulnerability data from NVD (NIST) · CISA KEV · EPSS