Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, a user with access to add/change a GitRepository record could use the REST API to directly set the current_head field on the record, which was not intended to be user-editable. Doing so could cause Nautobot's local clone(s) of the relevant repository to checkout a commit other than the latest commit on the specified branch (resulting in misleading state), or potentially to be unable to make use of the repository at all (until manually remediated) due to the current_head pointing to a nonexistent commit hash or malformed value. This vulnerability is fixed in 2.4.33 and 3.1.2.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-28 | 3 | Disclosure3 |
| 2026-05-29 | 1 | General1 |
🟠 Nautobot, Improper REST API Field Manipulation, #CVE-2026-44798 (Medium) -DC-May2026-25 https://dailycve.com/nautobot-improper-rest-api-field-manipulation-cve-2026-44798-medium-dc-may2026-25/
Post summary
The post simply announces CVE‑2026‑44798 for Nautobot, noting an improper REST API field manipulation issue, but provides no detailed technical, exploit, or mitigation information.
CVE-2026-44798 Unauthorized GitRepository State Manipulation in Nautobot Prior to 2.4.33 and 3.1.2 https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-44798
Post summary
The text announces CVE-2026-44798 as an unauthorized GitRepository state manipulation vulnerability affecting Nautobot versions prior to 2.4.33 and 3.1.2, with a link to a vulnerability details page.
🚨*CVE* CVE-2026-44798 Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, a user with access to add/change a GitRepository record could use th… https://www.cve.org/CVERecord?id=CVE-2026-44798 ----- Traducción: CVE-2026-44798 Nau… http://infoflow.cloud`
Post summary
The post announces CVE-2026-44798 in Nautobot, noting that versions prior to 2.4.33 and 3.1.2 are affected, implying an upgrade is recommended.
CVE-2026-44798 Nautobot is a Network Source of Truth and Network Automation Platform. Prior to 2.4.33 and 3.1.2, a user with access to add/change a GitRepository record could use th… https://www.cve.org/CVERecord?id=CVE-2026-44798
Post summary
The text announces CVE-2026-44798, noting that Nautobot versions before 2.4.33 and 3.1.2 are vulnerable to unauthorized GitRepository modifications, with upgrade recommended as the fix.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | networktocode | nautobot | - | - | - |