CVE Catalog
CVE-2026-57886
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk0.25%
17th percentile - higher than 17% of all known CVEs
Summary
The vulnerability allows re-linking attachments to issues/comments across repositories, potentially exposing private attachment content.
Risk Assessment
The organization risks disclosure of confidential data if private attachments are exposed to unauthorized users.
Recommendation
Update the system to a patched version and restrict the ability to move attachments between repositories.
Original NVD description (English source)
Cross-repository issue/comment attachment re-linking can expose private attachment content