CVE-2026-73240

CriticalCVSS 9.8

Published: 12/08/2026(UTC)Updated: 13/08/2026(UTC)Translated: 12/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.18%

8th percentile - higher than 8% of all known CVEs

Summary

Specifically crafted inputs may lead to git argument injection in Apache Allura before version 1.19.1.

Risk Assessment

An attacker could exploit this vulnerability to execute unauthorized git commands, potentially leading to repository integrity compromise or unauthorized access.

Recommendation

It is recommended to upgrade Apache Allura to version 1.19.1, which fixes the issue.

Original NVD description (English source)

Specifically crafted inputs may lead to git argument injection in Apache Allura. This issue affects Apache Allura: before 1.19.1. Users are recommended to upgrade to version 1.19.1, which fixes the issue.